In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: don't unpoison huge_zero_folio
When I did memory failure tests recently, below panic occurs:
kernel BUG at include/linux/mm.h:1135! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 9 PID: 137 Comm: kswapd1 Not tainted 6.9.0-rc4-00491-gd5ce28f156fe-dirty #14 RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0 Call Trace: <TASK> do_shrink_slab+0x14f/0x6a0 shrink_slab+0xca/0x8c0 shrink_node+0x2d0/0x7d0 balance_pgdat+0x33a/0x720 kswapd+0x1f3/0x410 kthread+0xd5/0x100 ret_from_fork+0x2f/0x50 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: mce_inject hwpoison_inject ---[ end trace 0000000000000000 ]--- RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0
The root cause is that HWPoison flag will be set for huge_zero_folio without increasing the folio refcnt. But then unpoison_memory() will decrease the folio refcnt unexpectedly as it appears like a successfully hwpoisoned folio leading to VM_BUG_ON_PAGE(page_ref_count(page) == 0) when releasing huge_zero_folio.
Skip unpoisoning huge_zero_folio in unpoison_memory() to fix this issue. We're not prepared to unpoison huge_zero_folio yet.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-64kUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade rtlaUpgrade kernel-rt-develUpgrade kernel-64k-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-develUpgrade kernel-cross-headersUpgrade rvUpgrade bpftool | Nov 4, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.162-107.160Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.96-102.177Upgrade perf | Oct 16, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 18, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 6, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade kernel-azure-develUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-qcomUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade dtb-appleUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-64kb-extra | Dec 5, 2025 | Dec 13, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-genericUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-5.15.0-1072-azure-fde | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub