In the Linux kernel, the following vulnerability has been resolved:
kernel: be more careful about dup_mmap() failures and uprobe registering
If a memory allocation fails during dup_mmap(), the maple tree can be left in an unsafe state for other iterators besides the exit path. All the locks are dropped before the exit_mmap() call (in mm/mmap.c), but the incomplete mm_struct can be reached through (at least) the rmap finding the vmas which have a pointer back to the mm_struct.
Up to this point, there have been no issues with being able to find an mm_struct that was only partially initialised. Syzbot was able to make the incomplete mm_struct fail with recent forking changes, so it has been proven unsafe to use the mm_struct that hasn't been initialised, as referenced in the link below.
Although 8ac662f5da19f ("fork: avoid inappropriate uprobe access to invalid mm") fixed the uprobe access, it does not completely remove the race.
This patch sets the MMF_OOM_SKIP to avoid the iteration of the vmas on the oom side (even though this is extremely unlikely to be selected as an oom victim in the race window), and sets MMF_UNSTABLE to avoid other potential users from using a partially initialised mm_struct.
When registering vmas for uprobe, skip the vmas in an mm that is marked unstable. Modifying a vma in an unstable mm may cause issues if the mm isn't fully initialised.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf6.12Upgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12Upgrade kernel-develUpgrade kernel-libbpf-staticUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-libbpf | Jun 3, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade kernel-syms | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-raspi-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kNo solution existsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-laptop-23.10Upgrade linux-image-oem-20.04dUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-azure-fips | Jun 26, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub