In the Linux kernel, the following vulnerability has been resolved:
mm: clear uffd-wp PTE/PMD state on mremap()
When mremap()ing a memory region previously registered with userfaultfd as write-protected but without UFFD_FEATURE_EVENT_REMAP, an inconsistency in flag clearing leads to a mismatch between the vma flags (which have uffd-wp cleared) and the pte/pmd flags (which do not have uffd-wp cleared). This mismatch causes a subsequent mprotect(PROT_WRITE) to trigger a warning in page_table_check_pte_flags() due to setting the pte to writable while uffd-wp is still set.
Fix this by always explicitly clearing the uffd-wp pte/pmd flags on any such mremap() so that the values are consistent with the existing clearing of VM_UFFD_WP. Be careful to clear the logical flag regardless of its physical form; a PTE bit, a swap PTE bit, or a PTE marker. Cover PTE, huge PMD and hugetlb paths.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-develUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade perfUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-rtUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64kUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-toolsUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-64kUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-extra | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | May 15, 2025 | Feb 12, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 12, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Feb 12, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade libperfUpgrade perfUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade kernel-debug-uki-virtUpgrade kernel-debug-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-rt-core | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade kernel-azureUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-azure-develUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-debug | May 22, 2025 | Feb 12, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-6.11.0-1013-gcp | Apr 24, 2025 | Feb 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub