In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: don't unpoison huge_zero_folio
When I did memory failure tests recently, below panic occurs:
kernel BUG at include/linux/mm.h:1135! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 9 PID: 137 Comm: kswapd1 Not tainted 6.9.0-rc4-00491-gd5ce28f156fe-dirty #14 RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0 Call Trace: <TASK> do_shrink_slab+0x14f/0x6a0 shrink_slab+0xca/0x8c0 shrink_node+0x2d0/0x7d0 balance_pgdat+0x33a/0x720 kswapd+0x1f3/0x410 kthread+0xd5/0x100 ret_from_fork+0x2f/0x50 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: mce_inject hwpoison_inject ---[ end trace 0000000000000000 ]--- RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0
The root cause is that HWPoison flag will be set for huge_zero_folio without increasing the folio refcnt. But then unpoison_memory() will decrease the folio refcnt unexpectedly as it appears like a successfully hwpoisoned folio leading to VM_BUG_ON_PAGE(page_ref_count(page) == 0) when releasing huge_zero_folio.
Skip unpoisoning huge_zero_folio in unpoison_memory() to fix this issue. We're not prepared to unpoison huge_zero_folio yet.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-64k-coreUpgrade kernel-toolsUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-64k-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modules-extraUpgrade rtlaUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-64k-modules-coreUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-uki-virtUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-64k-debugUpgrade kernel-64k-modules-extraUpgrade libperfUpgrade kernel-docUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-debug-modules-extra | Nov 4, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.162-107.160 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Oct 16, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 6, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade dtb-xilinxUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-64kbUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optional | Dec 5, 2025 | Dec 13, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1012-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-intelUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-nvidia-lowlatency | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub