Linux Kernel Stack Record Handling Vulnerability in Page Allocation

Vulnerability

A vulnerability in the Linux kernel's memory management component has been addressed. The issue arose because the function 'add_stack_record_to_list' was called in a context that did not allow for spinning, leading to potential inefficiencies or errors in stack record management. This vulnerability was identified by syzbot, a tool that detects bugs in the Linux kernel.

Impact

The vulnerability could cause improper handling of stack records, potentially leading to memory management issues.

Reproduction

The vulnerability can be reproduced by allocating pages without locking, using the 'alloc_pages_nolock_noprof' function. This bypasses normal allocation procedures, allowing the 'add_stack_record_to_list' function to be called in a context that does not permit spinning, thereby exposing the vulnerability.

Remediation

Users can apply the latest patches from the Linux kernel stable tree to address this vulnerability.

Added: Dec 16, 2025, 3:35 PM
Updated: Dec 16, 2025, 3:35 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.7
remediation
7.7
relevance
1.4
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.