Linux Kernel Page Table Synchronization Vulnerability in 4-Level Paging Systems

Vulnerability

A vulnerability in the Linux kernel's handling of page table synchronization can lead to intermittent boot failures on systems using 4-level paging and a large amount of persistent memory. This issue arises because, in 4-level paging, the default page directory population function does not perform any action, leaving certain kernel mappings unsynchronized. As a result, missing page table entries can cause kernel crashes. The vulnerability has been addressed by defining a specific synchronization function that ensures kernel mappings are properly propagated through the page tables, preventing the boot failures and crashes that were previously experienced.

Impact

The vulnerability could cause intermittent boot failures and kernel crashes due to missing page table entries for certain kernel mappings.

Reproduction

The vulnerability can be reproduced on systems using 4-level paging with a large amount of persistent memory. During the boot process, the lack of proper synchronization for kernel mappings can lead to page faults, causing the kernel to crash. This can be observed in the kernel logs, where the 'unable to handle page fault' messages indicate that the kernel is trying to access a page that is not present, due to the missing synchronization.

Remediation

Users can upgrade to the latest version of the Linux kernel, where this vulnerability has been addressed. Instructions for downloading the patched version can be found in the Linux kernel documentation.

Added: Sep 19, 2025, 4:59 PM
Updated: Sep 19, 2025, 4:59 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
0.6
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.