In the Linux kernel, the following vulnerability has been resolved:
mm/mglru: fix div-by-zero in vmpressure_calc_level()
evict_folios() uses a second pass to reclaim folios that have gone through page writeback and become clean before it finishes the first pass, since folio_rotate_reclaimable() cannot handle those folios due to the isolation.
The second pass tries to avoid potential double counting by deducting scan_control->nr_scanned. However, this can result in underflow of nr_scanned, under a condition where shrink_folio_list() does not increment nr_scanned, i.e., when folio_trylock() fails.
The underflow can cause the divisor, i.e., scale=scanned+reclaimed in vmpressure_calc_level(), to become zero, resulting in the following crash:
[exception RIP: vmpressure_work_fn+101] process_one_work at ffffffffa3313f2b
Since scan_control->nr_scanned has no established semantics, the potential double counting has minimal risks. Therefore, fix the problem by not deducting scan_control->nr_scanned in evict_folios().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade perf-debuginfo | Oct 16, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade dtb-apmUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-develUpgrade dtb-sprdUpgrade kernel-default-extraUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-64kb-extraUpgrade dtb-amlogicUpgrade dtb-armUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-azureUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-amazonUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azure | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1020-azure | Dec 13, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub