CVE-2025-38686

MEDIUM EPSS 4.2%
Published Sep 4, 20259mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Sep 4, 2025 9mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry When UFFDIO_MOVE encounters a migration PMD entry, it proceeds with obtaining a folio and accessing it even though the entry is swp_entry_t. Add the missing check and let split_huge_pmd() handle migration entries. While at it also remove unnecessary folio check. [surenb@google.com: remove extra folio check, per David]

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
4.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 4

VendorProductVersionRange
linuxlinux_kernel*≥6.8  –  <6.12.43
linuxlinux_kernel*≥6.13  –  <6.15.11
linuxlinux_kernel*≥6.16  –  <6.16.2
linuxlinux_kernel6.17any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/1202abad7a7ccd28c426d2844771a387b07629a4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7f1101a0a181243ad587ececdffc4845f035549f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/aba6faec0103ed8f169be8dce2ead41fcb689446
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bb81c18dbd42650c844e160cafa7cbb20243a96a
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/1202abad7a7ccd28c426d2844771a387b07629a4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7f1101a0a181243ad587ececdffc4845f035549f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/aba6faec0103ed8f169be8dce2ead41fcb689446
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bb81c18dbd42650c844e160cafa7cbb20243a96a
    Patch