CVE-2025-38510

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38510
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38510.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38510
Downstream
Related
Published
2025-08-16T10:54:52.438Z
Modified
2025-11-28T02:35:42.903239Z
Summary
kasan: remove kasan_find_vm_area() to prevent possible deadlock
Details

In the Linux kernel, the following vulnerability has been resolved:

kasan: remove kasanfindvm_area() to prevent possible deadlock

findvmarea() couldn't be called in atomiccontext. If findvm_area() is called to reports vm area information, kasan can trigger deadlock like:

CPU0 CPU1 vmalloc(); allocvmaparea(); spinlock(&vn->busy.lock) spinlockbh(&somelock); <interrupt occurs> <in softirq> spinlock(&somelock); <access invalid address> kasanreport(); printreport(); printaddressdescription(); kasanfindvmarea(); findvmarea(); spinlock(&vn->busy.lock) // deadlock!

To prevent possible deadlock while kasan reports, remove kasanfindvm_area().

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38510.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c056a364e9546bd513d1f5205f0ee316d8acb910
Fixed
595f78d99b9051600233c0a5c4c47e1097e6ed01
Fixed
8377d7744bdce5c4b3f1b58924eebd3fdc078dfc
Fixed
2d89dab1ea6086e6cbe6fe92531b496fb6808cb9
Fixed
0c3566d831def922cd56322c772a7b20d8b0e0c0
Fixed
6ee9b3d84775944fb8c8a447961cd01274ac671c

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
6.1.146
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.99
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.39
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.7