CVE-2025-38195

MediumCVSS 5.5/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()

ERROR INFO:

CPU 25 Unable to handle kernel paging request at virtual address 0x0 ... Call Trace: [<900000000023c30c>] huge_pte_offset+0x3c/0x58 [<900000000057fd4c>] hugetlb_follow_page_mask+0x74/0x438 [<900000000051fee8>] __get_user_pages+0xe0/0x4c8 [<9000000000522414>] faultin_page_range+0x84/0x380 [<9000000000564e8c>] madvise_vma_behavior+0x534/0xa48 [<900000000056689c>] do_madvise+0x1bc/0x3e8 [<9000000000566df4>] sys_madvise+0x24/0x38 [<90000000015b9e88>] do_syscall+0x78/0x98 [<9000000000221f18>] handle_syscall+0xb8/0x158

In some cases, pmd may be NULL and rely on NULL as the return value for processing, so it is necessary to determine this situation here.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 34256805720993e37adf6127371a1265aea8376a, < 55a9a7d21309bbea1dd629cf28396521a2803bb3; >= 2ca9380b12711afe95b3589bd82b59623b3c96b3, < b427d98d55217b53c88643579fbbd8a4c351a105; >= 51424fd171cee6a33f01f7c66b8eb23ac42289d4, < 985f086f281b7bbb6644851e63af1a17ffff9277; >= bd51834d1cf65a2c801295d230c220aeebf87a73, < b5c7397b7fd125203c60b59860c168ee92291272; >= bd51834d1cf65a2c801295d230c220aeebf87a73, < ee084fa96123ede8b0563a1b5a9b23adc43cd50d; b49f085cd671addbda4802d6b9382513f7dd0f30; >= 6.1.136, < 6.1.191; >= 6.6.89, < 6.6.95; >= 6.12.26, < 6.12.35; >= 6.14.5, < 6.15
LinuxLinux6.15

References

Timeline

Published
Jul 4, 2025
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-381965.5In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: validate buffer count with offset for cloning syzbot reCVE-2025-381975.5In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell_rbu: Fix list usage Pass the correct list head to lCVE-2025-381987.8In the Linux kernel, the following vulnerability has been resolved: fbcon: Make sure modelist not set on unregistered console It looks likCVE-2025-381995.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix memory leak due to multiple rx_stats allocation rx_sCVE-2025-38208.8A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this issue is the functioCVE-2025-382005.5In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When tCVE-2025-382017.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX OtCVE-2025-382025.5In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() CVE-2025-382035.5In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfs_ioc_trim [ Syzkaller Report ] Oops: geCVE-2025-382047.1In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in add_missing_indices stbl isCVE-2025-382055.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 CVE-2025-382067.8In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in
CVE-2025-38195: Medium severity, CVSS 5.5 | Vulnix