-

CVE-2025-38510

In the Linux kernel, the following vulnerability has been resolved:

kasan: remove kasan_find_vm_area() to prevent possible deadlock

find_vm_area() couldn't be called in atomic_context.  If find_vm_area() is
called to reports vm area information, kasan can trigger deadlock like:

CPU0                                CPU1
vmalloc();
 alloc_vmap_area();
  spin_lock(&vn->busy.lock)
                                    spin_lock_bh(&some_lock);
   <interrupt occurs>
   <in softirq>
   spin_lock(&some_lock);
                                    <access invalid address>
                                    kasan_report();
                                     print_report();
                                      print_address_description();
                                       kasan_find_vm_area();
                                        find_vm_area();
                                         spin_lock(&vn->busy.lock) // deadlock!

To prevent possible deadlock while kasan reports, remove kasan_find_vm_area().

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version < 595f78d99b9051600233c0a5c4c47e1097e6ed01
Version c056a364e9546bd513d1f5205f0ee316d8acb910
Status affected
Version < 8377d7744bdce5c4b3f1b58924eebd3fdc078dfc
Version c056a364e9546bd513d1f5205f0ee316d8acb910
Status affected
Version < 2d89dab1ea6086e6cbe6fe92531b496fb6808cb9
Version c056a364e9546bd513d1f5205f0ee316d8acb910
Status affected
Version < 0c3566d831def922cd56322c772a7b20d8b0e0c0
Version c056a364e9546bd513d1f5205f0ee316d8acb910
Status affected
Version < 6ee9b3d84775944fb8c8a447961cd01274ac671c
Version c056a364e9546bd513d1f5205f0ee316d8acb910
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 5.18
Status affected
Version < 5.18
Version 0
Status unaffected
Version <= 6.1.*
Version 6.1.146
Status unaffected
Version <= 6.6.*
Version 6.6.99
Status unaffected
Version <= 6.12.*
Version 6.12.39
Status unaffected
Version <= 6.15.*
Version 6.15.7
Status unaffected
Version <= *
Version 6.16
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.056
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String