In the Linux kernel, the following vulnerability has been resolved:
mm/page_alloc: fix race condition in unaccepted memory handling
The page allocator tracks the number of zones that have unaccepted memory using static_branch_enc/dec() and uses that static branch in hot paths to determine if it needs to deal with unaccepted memory.
Borislav and Thomas pointed out that the tracking is racy: operations on static_branch are not serialized against adding/removing unaccepted pages to/from the zone.
Sanity checks inside static_branch machinery detects it:
WARNING: CPU: 0 PID: 10 at kernel/jump_label.c:276 __static_key_slow_dec_cpuslocked+0x8e/0xa0
The comment around the WARN() explains the problem:
/* * Warn about the '-1' case though; since that means a * decrement is concurrent with a first (0->1) increment. IOW * people are trying to disable something that wasn't yet fully * enabled. This suggests an ordering problem on the user side. */
The effect of this static_branch optimization is only visible on microbenchmark.
Instead of adding more complexity around it, remove it altogether.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-6.12.30-34.92Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-develUpgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade python3-perf6.12 | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade dtb-freescaleUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade kernel-default-base | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-azureUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-aws-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1011-awsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oem-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-ibm-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-xilinxUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-oracle-6.14Upgrade linux-image-oracleUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-64k-lts-24.04 | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub