In the Linux kernel, the following vulnerability has been resolved:
mm: clear uffd-wp PTE/PMD state on mremap()
When mremap()ing a memory region previously registered with userfaultfd as write-protected but without UFFD_FEATURE_EVENT_REMAP, an inconsistency in flag clearing leads to a mismatch between the vma flags (which have uffd-wp cleared) and the pte/pmd flags (which do not have uffd-wp cleared). This mismatch causes a subsequent mprotect(PROT_WRITE) to trigger a warning in page_table_check_pte_flags() due to setting the pte to writable while uffd-wp is still set.
Fix this by always explicitly clearing the uffd-wp pte/pmd flags on any such mremap() so that the values are consistent with the existing clearing of VM_UFFD_WP. Be careful to clear the logical flag regardless of its physical form; a PTE bit, a swap PTE bit, or a PTE marker. Cover PTE, huge PMD and hugetlb paths.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debugUpgrade kernel-rt-64k-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-coreUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modules-coreUpgrade kernel-develUpgrade perfUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-64kUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modulesUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-64k-debugUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-devel-matchedUpgrade rvUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64kUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debugUpgrade libperfUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-devel-matched | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | May 15, 2025 | Feb 12, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 12, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Feb 12, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-modules-coreUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-uki-virtUpgrade rvUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-devel-matchedUpgrade perfUpgrade libperfUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extra | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rt | May 22, 2025 | Feb 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-awsUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-azure | Apr 24, 2025 | Feb 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub