In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: drop beyond-EOF folios with the right number of refs
When an after-split folio is large and needs to be dropped due to EOF, folio_put_refs(folio, folio_nr_pages(folio)) should be used to drop all page cache refs. Otherwise, the folio will not be freed, causing memory leak.
This leak would happen on a filesystem with blocksize > page_size and a truncate is performed, where the blocksize makes folios split to >0 order ones, causing truncated folios not being freed.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12Upgrade kernel-livepatch-6.12.22-27.96Upgrade python3-perf6.12Upgrade perf6.12Upgrade kernel-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfo | Jun 24, 2025 | Apr 3, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2025 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-64kb-extraUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-awsUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-6.11Upgrade linux-image-lowlatency-6.11Upgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-azure-fde-edgeUpgrade linux-image-azure-fde-6.11Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-lowlatency-64k-6.11 | Jun 26, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub