Linux Kernel Soft Lockup Vulnerability in mTHP Swap-in Handling

Vulnerability

A vulnerability in the Linux kernel's memory management related to transparent huge pages (mTHP) and swap handling has been identified. This issue can lead to a soft lockup, where the CPU becomes unresponsive for an extended period. The vulnerability arises when mTHP folios are swapped in, conflicting with readahead operations, causing a loop of failed allocations and retries. The problem has been observed in kernel version 6.15.0.

Impact

Exploitation of this vulnerability causes a soft lockup, where a CPU core becomes unresponsive for an extended period, potentially leading to degraded system performance or responsiveness.

Reproduction

The vulnerability can be reproduced by enabling mTHP, activating a large swap device (such as a 48G zram swap), and then creating a memory-intensive workload that reads and writes large amounts of data. This process can be monitored to observe the resulting soft lockup on the CPU.

Remediation

Users can apply the latest kernel patches available in the Linux kernel stable repository to address this vulnerability.

Added: Jul 9, 2025, 12:04 PM
Updated: Jul 9, 2025, 12:04 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
0.0
relevance
0.2
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.