In the Linux kernel, the following vulnerability has been resolved:
hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
Commit b15c87263a69 ("hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined) add page poison checks in do_migrate_range in order to make offline hwpoisoned page possible by introducing isolate_lru_page and try_to_unmap for hwpoisoned page. However folio lock must be held before calling try_to_unmap. Add it to fix this problem.
Warning will be produced if folio is not locked during unmap:
------------[ cut here ]------------ kernel BUG at ./include/linux/swapops.h:400! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 4 UID: 0 PID: 411 Comm: bash Tainted: G W 6.13.0-rc1-00016-g3c434c7ee82a-dirty #41 Tainted: [W]=WARN Hardware name: QEMU QEMU Virtual Machine, BIOS 0.0.0 02/06/2015 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : try_to_unmap_one+0xb08/0xd3c lr : try_to_unmap_one+0x3dc/0xd3c Call trace: try_to_unmap_one+0xb08/0xd3c (P) try_to_unmap_one+0x3dc/0xd3c (L) rmap_walk_anon+0xdc/0x1f8 rmap_walk+0x3c/0x58 try_to_unmap+0x88/0x90 unmap_poisoned_folio+0x30/0xa8 do_migrate_range+0x4a0/0x568 offline_pages+0x5a4/0x670 memory_block_action+0x17c/0x374 memory_subsys_offline+0x3c/0x78 device_offline+0xa4/0xd0 state_store+0x8c/0xf0 dev_attr_store+0x18/0x2c sysfs_kf_write+0x44/0x54 kernfs_fop_write_iter+0x118/0x1a8 vfs_write+0x3a8/0x4bc ksys_write+0x6c/0xf8 __arm64_sys_write+0x1c/0x28 invoke_syscall+0x44/0x100 el0_svc_common.constprop.0+0x40/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x30/0xd0 el0t_64_sync_handler+0xc8/0xcc el0t_64_sync+0x198/0x19c Code: f9407be0 b5fff320 d4210000 17ffff97 (d4210000) ---[ end trace 0000000000000000 ]---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.140-154.222Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-tools-devel | Aug 5, 2025 | Apr 1, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Jun 13, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Jul 21, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Jul 1, 2025 | Apr 1, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Apr 1, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernel-modulesUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfo | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-default-manUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade dtb-marvellUpgrade kernel-debugUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-develUpgrade dtb-caviumUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-default-optional | Dec 5, 2025 | May 20, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gke-6.8Upgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-xilinxUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gke-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-virtual-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-6.8Upgrade linux-image-realtime-6.8.1 | Jun 26, 2025 | Apr 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub