In the Linux kernel, the following vulnerability has been resolved:
mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER
When registering VTL0 memory via MSHV_ADD_VTL0_MEMORY, the kernel computes pgmap->vmemmap_shift as the number of trailing zeros in the OR of start_pfn and last_pfn, intending to use the largest compound page order both endpoints are aligned to.
However, this value is not clamped to MAX_FOLIO_ORDER, so a sufficiently aligned range (e.g. physical range [0x800000000000, 0x800080000000), corresponding to start_pfn=0x800000000 with 35 trailing zeros) can produce a shift larger than what memremap_pages() accepts, triggering a WARN and returning -EINVAL:
WARNING: ... memremap_pages+0x512/0x650 requested folio size unsupported
The MAX_FOLIO_ORDER check was added by commit 646b67d57589 ("mm/memremap: reject unreasonable folio/compound page sizes in memremap_pages()").
Fix this by clamping vmemmap_shift to MAX_FOLIO_ORDER so we always request the largest order the kernel supports, in those cases, rather than an out-of-range value.
Also fix the error path to propagate the actual error code from devm_memremap_pages() instead of hard-coding -EFAULT, which was masking the real -EINVAL return.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-azure-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-azureUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-realtime-64kUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-gcpUpgrade linux-image-generic-64k-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-aws-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-7.0.0-27-genericUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-virtualUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-nvidia-7.0Upgrade linux-image-azure-fde | Jul 1, 2026 | May 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub