In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Check return value from memblock_phys_alloc_range()
At least with CONFIG_PHYSICAL_START=0x100000, if there is < 4 MiB of contiguous free memory available at this point, the kernel will crash and burn because memblock_phys_alloc_range() returns 0 on failure, which leads memblock_phys_free() to throw the first 4 MiB of physical memory to the wolves.
At a minimum it should fail gracefully with a meaningful diagnostic, but in fact everything seems to work fine without the weird reserve allocation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfoUpgrade perfUpgrade kernel-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade python3-perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel-livepatch-6.12.31-35.92Upgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.141-155.222Upgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-toolsUpgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-6.14Upgrade linux-image-raspiUpgrade linux-image-raspi-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-xilinxUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-oracle-6.14Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-6.8 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub