In the Linux kernel, the following vulnerability has been resolved:
mm: clear uffd-wp PTE/PMD state on mremap()
When mremap()ing a memory region previously registered with userfaultfd as write-protected but without UFFD_FEATURE_EVENT_REMAP, an inconsistency in flag clearing leads to a mismatch between the vma flags (which have uffd-wp cleared) and the pte/pmd flags (which do not have uffd-wp cleared). This mismatch causes a subsequent mprotect(PROT_WRITE) to trigger a warning in page_table_check_pte_flags() due to setting the pte to writable while uffd-wp is still set.
Fix this by always explicitly clearing the uffd-wp pte/pmd flags on any such mremap() so that the values are consistent with the existing clearing of VM_UFFD_WP. Be careful to clear the logical flag regardless of its physical form; a PTE bit, a swap PTE bit, or a PTE marker. Cover PTE, huge PMD and hugetlb paths.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade python3-perfUpgrade perfUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernelUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-rt-64k-modules-extraUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-rt-64kUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-docUpgrade kernel-develUpgrade kernel-64k-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-devel | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | May 15, 2025 | Feb 12, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 12, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Feb 12, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modulesUpgrade kernelUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-uki-virtUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-core | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-sprd | May 22, 2025 | Feb 12, 2025 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1013-azureUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1014-oracle | Apr 24, 2025 | Feb 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub