fkie_nvd - fkie_cve-2025-68253

fkie_cve-2025-68253

Vulnerability from fkie_nvd

Published

2025-12-16 15:15

Modified

2025-12-18 15:08

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: mm: don't spin in add_stack_record when gfp flags don't allow syzbot was able to find the following path: add_stack_record_to_list mm/page_owner.c:182 [inline] inc_stack_record_count mm/page_owner.c:214 [inline] __set_page_owner+0x2c3/0x4a0 mm/page_owner.c:333 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1851 prep_new_page mm/page_alloc.c:1859 [inline] get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3858 alloc_pages_nolock_noprof+0x94/0x120 mm/page_alloc.c:7554 Don't spin in add_stack_record_to_list() when it is called from *_nolock() context.

References

	URL	Tags
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/504174133453e3af73e626e328603d7eb5986f34
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/c83aab85e18103a6dc066b4939e2c92a02bb1b05

Impacted products

	Vendor	Product	Version

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: don\u0027t spin in add_stack_record when gfp flags don\u0027t allow\n\nsyzbot was able to find the following path:\n  add_stack_record_to_list mm/page_owner.c:182 [inline]\n  inc_stack_record_count mm/page_owner.c:214 [inline]\n  __set_page_owner+0x2c3/0x4a0 mm/page_owner.c:333\n  set_page_owner include/linux/page_owner.h:32 [inline]\n  post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1851\n  prep_new_page mm/page_alloc.c:1859 [inline]\n  get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3858\n  alloc_pages_nolock_noprof+0x94/0x120 mm/page_alloc.c:7554\n\nDon\u0027t spin in add_stack_record_to_list() when it is called\nfrom *_nolock() context."
    }
  ],
  "id": "CVE-2025-68253",
  "lastModified": "2025-12-18T15:08:06.237",
  "metrics": {},
  "published": "2025-12-16T15:15:54.660",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/504174133453e3af73e626e328603d7eb5986f34"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/c83aab85e18103a6dc066b4939e2c92a02bb1b05"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Awaiting Analysis"
}

CVE-2025-68253 (GCVE-0-2025-68253)

Vulnerability from cvelistv5

Published

2025-12-16 14:32

Modified

2025-12-16 14:32

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: mm: don't spin in add_stack_record when gfp flags don't allow syzbot was able to find the following path: add_stack_record_to_list mm/page_owner.c:182 [inline] inc_stack_record_count mm/page_owner.c:214 [inline] __set_page_owner+0x2c3/0x4a0 mm/page_owner.c:333 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1851 prep_new_page mm/page_alloc.c:1859 [inline] get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3858 alloc_pages_nolock_noprof+0x94/0x120 mm/page_alloc.c:7554 Don't spin in add_stack_record_to_list() when it is called from *_nolock() context.

References

URL

Tags

	https://git.kernel.org/stable/c/504174133453e3af73e626e328603d7eb5986f34
	https://git.kernel.org/stable/c/c83aab85e18103a6dc066b4939e2c92a02bb1b05

Impacted products

Vendor

Product

Version

Version: 97769a53f117e2f33864c587d85992ee35194ecf
Version: 97769a53f117e2f33864c587d85992ee35194ecf

Version: 6.15

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "mm/page_owner.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "504174133453e3af73e626e328603d7eb5986f34",
              "status": "affected",
              "version": "97769a53f117e2f33864c587d85992ee35194ecf",
              "versionType": "git"
            },
            {
              "lessThan": "c83aab85e18103a6dc066b4939e2c92a02bb1b05",
              "status": "affected",
              "version": "97769a53f117e2f33864c587d85992ee35194ecf",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "mm/page_owner.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.15"
            },
            {
              "lessThan": "6.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17.6",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: don\u0027t spin in add_stack_record when gfp flags don\u0027t allow\n\nsyzbot was able to find the following path:\n  add_stack_record_to_list mm/page_owner.c:182 [inline]\n  inc_stack_record_count mm/page_owner.c:214 [inline]\n  __set_page_owner+0x2c3/0x4a0 mm/page_owner.c:333\n  set_page_owner include/linux/page_owner.h:32 [inline]\n  post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1851\n  prep_new_page mm/page_alloc.c:1859 [inline]\n  get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3858\n  alloc_pages_nolock_noprof+0x94/0x120 mm/page_alloc.c:7554\n\nDon\u0027t spin in add_stack_record_to_list() when it is called\nfrom *_nolock() context."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-16T14:32:19.546Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/504174133453e3af73e626e328603d7eb5986f34"
        },
        {
          "url": "https://git.kernel.org/stable/c/c83aab85e18103a6dc066b4939e2c92a02bb1b05"
        }
      ],
      "title": "mm: don\u0027t spin in add_stack_record when gfp flags don\u0027t allow",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-68253",
    "datePublished": "2025-12-16T14:32:19.546Z",
    "dateReserved": "2025-12-16T13:41:40.266Z",
    "dateUpdated": "2025-12-16T14:32:19.546Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.