Linux Kernel VMA Split Vulnerability in Tracing Buffers

Vulnerability

A vulnerability in the Linux kernel's handling of virtual memory areas (VMAs) for trace buffer mappings has been addressed. When a VMA is split, the kernel calls the close operation on each portion. This can lead to the ring_buffer_unmap function being called multiple times, while ring_buffer_map is only called once. As a result, subsequent calls to ring_buffer_unmap return an error, triggering a warning. Trace buffer mappings require the complete buffer, including the meta page, and cannot support partial mappings. The vulnerability has been fixed by adding a callback to prevent VMA splits.

Impact

The vulnerability could cause warnings to be triggered due to improper handling of split VMAs, potentially leading to confusion or misinterpretation of the system's state.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed.

Added: Dec 22, 2025, 5:25 PM
Updated: Dec 22, 2025, 5:25 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.0
remediation
7.7
relevance
1.5
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.