Linux Kernel VMW Balloon Migration Success Indication Vulnerability

Vulnerability

A vulnerability in the Linux kernel's VMW balloon driver has been addressed. During the migration of balloon pages, the old page is deflated before the new page is inflated. If the new page is successfully inflated, the old page is effectively deflated, reducing the balloon size. This indicates a successful migration, and the old page is returned to the buddy system. However, the migration core incorrectly leaves the page marked as isolated, leading to a warning when trying to return the page. This issue has been resolved by modifying the migration handling to correctly indicate a successful migration, ensuring consistency between the balloon driver and the migration core.

Impact

The vulnerability could lead to inconsistent page isolation states during balloon page migration, causing warnings and potential mismanagement of memory resources.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.

Added: Dec 16, 2025, 3:39 PM
Updated: Dec 16, 2025, 3:39 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.0
remediation
7.7
relevance
1.5
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.