In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: fix NULL pointer deference when splitting folio
Commit c010d47f107f ("mm: thp: split huge page to any lower order pages") introduced an early check on the folio's order via mapping->flags before proceeding with the split work.
This check introduced a bug: for shmem folios in the swap cache and truncated folios, the mapping pointer can be NULL. Accessing mapping->flags in this state leads directly to a NULL pointer dereference.
This commit fixes the issue by moving the check for mapping != NULL before any attempt to access mapping->flags.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool6.12-debuginfoUpgrade kernel6.12Upgrade bpftool6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-develUpgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.12.63-84.121Upgrade kernel6.12-develUpgrade kernel6.12-tools-develUpgrade kernel6.12-headersUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpfUpgrade python3-perf6.12Upgrade kernel6.12-toolsUpgrade perf6.12Upgrade python3-perf6.12-debuginfo | Feb 20, 2026 | Dec 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 24, 2026 | Dec 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.17.0-19-genericUpgrade linux-image-oem-6.17Upgrade linux-image-oem-24.04bUpgrade linux-image-virtualUpgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-aws-6.17Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-6.17Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.17.0-1017-oemUpgrade linux-image-oem-24.04dUpgrade linux-image-gcp-6.17Upgrade linux-image-oem-24.04aUpgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-azure-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.17Upgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-generic-6.17Upgrade linux-image-realtime-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-aws-64k-6.17Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.17Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-raspiUpgrade linux-image-6.17.0-1010-azureUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-awsUpgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-6.17.0-1009-aws | Mar 17, 2026 | Dec 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 18, 2026 | Dec 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub