CVE-2025-68737

In the Linux kernel, the following vulnerability has been resolved: arm64/pageattr: Propagate return value from __change_memory_common The rodata=on security measure requires that any code path which does vmalloc -> set_memory_ro/set_memory_rox must protect the linear map alias too. Therefore, if such a call fails, we must abort set_memory_* and caller must take appropriate action; currently we are suppressing the error, and there is a real chance of such an error arising post commit a166563e7ec3 ("arm64: mm: support large block mapping when rodata=full"). Therefore, propagate any error to the caller.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/3e2fc1e57a5361633a4bf4222640c6bfe41ff8ea
https://git.kernel.org/stable/c/e5efd56fa157d2e7d789949d1d64eccbac18a897

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-24 13:16

Updated : 2026-06-17 09:59

NVD link : CVE-2025-68737

Mitre link : CVE-2025-68737

CVE.ORG link : CVE-2025-68737

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2025-68737", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "a166563e7ec375b38a0fd3a58f7b77e50a6bc6a8", "lessThan": "3e2fc1e57a5361633a4bf4222640c6bfe41ff8ea", "versionType": "git"}, {"status": "affected", "version": "a166563e7ec375b38a0fd3a58f7b77e50a6bc6a8", "lessThan": "e5efd56fa157d2e7d789949d1d64eccbac18a897", "versionType": "git"}], "programFiles": ["arch/arm64/mm/pageattr.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.18"}, {"status": "unaffected", "version": "0", "lessThan": "6.18", "versionType": "semver"}, {"status": "unaffected", "version": "6.18.2", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/arm64/mm/pageattr.c"], "defaultStatus": "affected"}]}], "published": "2025-12-24T13:16:28.653", "references": [{"url": "https://git.kernel.org/stable/c/3e2fc1e57a5361633a4bf4222640c6bfe41ff8ea", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e5efd56fa157d2e7d789949d1d64eccbac18a897", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64/pageattr: Propagate return value from __change_memory_common\n\nThe rodata=on security measure requires that any code path which does\nvmalloc -> set_memory_ro/set_memory_rox must protect the linear map alias\ntoo. Therefore, if such a call fails, we must abort set_memory_* and caller\nmust take appropriate action; currently we are suppressing the error, and\nthere is a real chance of such an error arising post commit a166563e7ec3\n(\"arm64: mm: support large block mapping when rodata=full\"). Therefore,\npropagate any error to the caller."}], "lastModified": "2026-06-17T09:59:30.253", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}