The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: don't unpoison huge_zero_folio
When I did memory failure tests recently, below panic occurs:
kernel BUG at include/linux/mm.h:1135! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 9 PID: 137 Comm: kswapd1 Not tainted 6.9.0-rc4-00491-gd5ce28f156fe-dirty #14 RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0 Call Trace: <TASK> do_shrink_slab+0x14f/0x6a0 shrink_slab+0xca/0x8c0 shrink_node+0x2d0/0x7d0 balance_pgdat+0x33a/0x720 kswapd+0x1f3/0x410 kthread+0xd5/0x100 ret_from_fork+0x2f/0x50 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: mce_inject hwpoison_inject ---[ end trace 0000000000000000 ]--- RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0
The root cause is that HWPoison flag will be set for huge_zero_folio without increasing the folio refcnt. But then unpoison_memory() will decrease the folio refcnt unexpectedly as it appears like a successfully hwpoisoned folio leading to VM_BUG_ON_PAGE(page_ref_count(page) == 0) when releasing huge_zero_folio.
Skip unpoisoning huge_zero_folio in unpoison_memory() to fix this issue. We're not prepared to unpoison huge_zero_folio yet.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-uki-virtUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-64k-debugUpgrade kernel-modulesUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-64k-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-develUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade rvUpgrade kernel-debugUpgrade kernel-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-64k-modules-coreUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernelUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-rt-devel | Nov 4, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.162-107.160Upgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Oct 16, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 18, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 6, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade dtb-amazonUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade kernel-debugUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azure | Dec 5, 2025 | Dec 13, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-azureUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1015-aws | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub