Linux Kernel GPF Vulnerability in Bitmap Statistics Collection

CVE-2025-38451

What is CVE-2025-38451?

A flaw in the Linux kernel's bitmap statistics collection can lead to a General Protection Fault (GPF). This occurs when the code for checking bitmap validity only verifies the existence of a super-block for internal bitmaps, neglecting external bitmap cases. Thus, it risks invalid reads from non-canonical addresses. A recent commit has addressed this oversight by enforcing checks for both internal and external bitmap storage locations, ensuring more reliable statistics retrieval and enhancing overall system stability.

References