CVE-2025-40311

Linux Kernel - Denial of Service via vmalloc-backed Coherent Memory Mapping

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled, dma_alloc_coherent() with GFP_USER may return addresses from the vmalloc range. If such an address is mapped without VM_MIXEDMAP, vm_insert_page() will trigger a BUG_ON due to the VM_PFNMAP restriction. Fix this by checking for vmalloc addresses and setting VM_MIXEDMAP in the VMA before mapping. This ensures safe mapping and avoids kernel crashes. The memory is still driver-allocated and cannot be accessed directly by userspace.

Scores

EPSS 0.0003
EPSS Percentile 8.4%

Details

Status published
Products (13)
linux/Kernel 5.8.0 - 6.6.117linux
linux/Kernel 6.13.0 - 6.17.8linux
linux/Kernel 6.7.0 - 6.12.58linux
Linux/Linux < 5.8
Linux/Linux 5.8
Linux/Linux 6.12.58 - 6.12.*
Linux/Linux 6.17.8 - 6.17.*
Linux/Linux 6.18
Linux/Linux 6.6.117 - 6.6.*
Linux/Linux ac0ae6a96aa58eeba4aed97b12ef1dea8c5bf399 - 513024d5a0e34fd34247043f1876b6138ca52847
... and 3 more
Published Dec 08, 2025
Tracked Since Feb 18, 2026