Soft Lockup in Linux Kernel due to Memory Size Configuration
CVE-2025-21851
Summary
A vulnerability exists in the Linux kernel related to the handling of memory size configurations for AArch64 architecture. Specifically, in scenarios where CONFIG_PAGE_SIZE_64KB is enabled, a segmentation fault may occur during the execution of arena_map_free(), leading to a soft lockup. This issue arises when an unaligned address is passed to apply_to_pte_range(), disrupting the memory management flow. The vulnerability has been addressed by ensuring that the address returned by bpf_arena_get_kern_vm_start() is properly aligned according to the page size, preventing such failures and enhancing system stability.
Affected Version(s)
Linux 317460317a02a1af512697e6e964298dedd8a163
Linux 317460317a02a1af512697e6e964298dedd8a163 < 787d556a3de447e70964a4bdeba9196f62a62b1e
Linux 317460317a02a1af512697e6e964298dedd8a163 < 517e8a7835e8cfb398a0aeb0133de50e31cae32b
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved