Threats tagged 'ghsa-crvf-pv9v-3xvj'

CVE-2025-38447 is a high-severity vulnerability in the Linux kernel's memory management subsystem. It involves a potential out-of-bounds access in the page table during batched unmap operations in the try_to_unmap_one() function. This flaw could be triggered from userspace, although the scenario is considered rare. The issue arises when a large folio's page table entries (PTEs) span multiple page tables, leading to reading beyond the valid PTE table boundary. The vulnerability has been addressed by refactoring the unmap logic into a new helper function that safely caps the batch size to avoid out-of-bounds access.