In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: don't unpoison huge_zero_folio
When I did memory failure tests recently, below panic occurs:
kernel BUG at include/linux/mm.h:1135! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 9 PID: 137 Comm: kswapd1 Not tainted 6.9.0-rc4-00491-gd5ce28f156fe-dirty #14 RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0 Call Trace: <TASK> do_shrink_slab+0x14f/0x6a0 shrink_slab+0xca/0x8c0 shrink_node+0x2d0/0x7d0 balance_pgdat+0x33a/0x720 kswapd+0x1f3/0x410 kthread+0xd5/0x100 ret_from_fork+0x2f/0x50 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: mce_inject hwpoison_inject ---[ end trace 0000000000000000 ]--- RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0
The root cause is that HWPoison flag will be set for huge_zero_folio without increasing the folio refcnt. But then unpoison_memory() will decrease the folio refcnt unexpectedly as it appears like a successfully hwpoisoned folio leading to VM_BUG_ON_PAGE(page_ref_count(page) == 0) when releasing huge_zero_folio.
Skip unpoisoning huge_zero_folio in unpoison_memory() to fix this issue. We're not prepared to unpoison huge_zero_folio yet.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-coreUpgrade kernel-cross-headersUpgrade rvUpgrade kernel-debug-uki-virtUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-rt-modules-coreUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade kernel-docUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-abi-stablelistsUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-64k-devel-matchedUpgrade kernel-uki-virtUpgrade perfUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade libperf | Nov 4, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.162-107.160Upgrade kernel-headersUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade perfUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-debuginfo | Oct 16, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 6, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade ocfs2-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-debugUpgrade dtb-apmUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kb | Dec 5, 2025 | Dec 13, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-6.8.0-1014-azure | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub