CVE-2025-39754

Source
https://cve.org/CVERecord?id=CVE-2025-39754
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39754.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-39754
Downstream
Related
Published
2025-09-11T16:52:24.763Z
Modified
2026-05-10T18:42:09.905204086Z
Summary
mm/smaps: fix race between smaps_hugetlb_range and migration
Details

In the Linux kernel, the following vulnerability has been resolved:

mm/smaps: fix race between smapshugetlbrange and migration

smapshugetlbrange() handles the pte without holdling ptl, and may be concurrenct with migration, leaing to BUGON in pfnswapentryto_page(). The race is as follows.

smapshugetlbrange migratepages hugeptepget removemigrationptes foliounlock pfnswapentryfolio BUGON

To fix it, hold ptl lock in smapshugetlbrange().

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39754.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
25ee01a2fca02dfb5a3ce316e77910c468108199
Fixed
2a1f3663974162b8f1e098196f557cfc1d160138
Fixed
09fc018f48871123ad5dbd7b03c956580232ed76
Fixed
b625883ccbcc2b57808db51d1375b1d7b9bcb3e5
Fixed
45d19b4b6c2d422771c29b83462d84afcbb33f01

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39754.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.4.0
Fixed
6.12.43
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.11
Type
ECOSYSTEM
Events
Introduced
6.16.0
Fixed
6.16.2

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39754.json"