Linux Kernel Vulnerability in vmw_balloon During Migration

CVE-2025-68248

What is CVE-2025-68248?

A flaw has been identified in the Linux kernel related to the vmw_balloon driver during the migration of balloon pages. When an old page is deflated during migration, it can improperly be marked as isolated even after a successful inflation of a new page. This inconsistency in memory status leads to complications in the migration process, where the isolated page remains flagged incorrectly, causing potential synchronization issues. The resolution aims to maintain consistency and clear the 'isolated' status effectively post-migration, enhancing the stability of memory handling.

References