In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: fix NULL pointer deference when splitting folio
Commit c010d47f107f ("mm: thp: split huge page to any lower order pages") introduced an early check on the folio's order via mapping->flags before proceeding with the split work.
This check introduced a bug: for shmem folios in the swap cache and truncated folios, the mapping pointer can be NULL. Accessing mapping->flags in this state leads directly to a NULL pointer dereference.
This commit fixes the issue by moving the check for mapping != NULL before any attempt to access mapping->flags.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool6.12Upgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-develUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-libbpfUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-headersUpgrade kernel6.12-tools-debuginfoUpgrade kernel-livepatch-6.12.63-84.121Upgrade python3-perf6.12-debuginfoUpgrade perf6.12Upgrade python3-perf6.12 | Feb 20, 2026 | Dec 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 24, 2026 | Dec 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-6.17.0-19-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-realtime-6.17Upgrade linux-image-oem-6.17Upgrade linux-image-generic-64kUpgrade linux-image-aws-6.17Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04cUpgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-virtualUpgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-raspi-6.17Upgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-azure-6.17Upgrade linux-image-gcpUpgrade linux-image-generic-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-virtual-6.17Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04dUpgrade linux-image-gcp-6.17Upgrade linux-image-6.17.0-1017-oemUpgrade linux-image-oem-24.04Upgrade linux-image-aws-64k-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-1010-azureUpgrade linux-image-6.17.0-1009-awsUpgrade linux-image-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.17 | Mar 17, 2026 | Dec 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 18, 2026 | Dec 16, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub