AZL-72713
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-72713.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-72713
- Upstream
- Published
- 2025-06-18T10:15:40Z
- Modified
- 2026-04-01T05:22:11.713290Z
- Summary
- CVE-2025-38071 affecting package kernel 5.15.200.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Check return value from memblockphysalloc_range()
At least with CONFIGPHYSICALSTART=0x100000, if there is < 4 MiB of contiguous free memory available at this point, the kernel will crash and burn because memblockphysallocrange() returns 0 on failure, which leads memblockphys_free() to throw the first 4 MiB of physical memory to the wolves.
At a minimum it should fail gracefully with a meaningful diagnostic, but in fact everything seems to work fine without the weird reserve allocation.
- References