PT-2025-36263
CVE-2025-38733
·
Published
2025-08-07
·
Updated
2026-04-07
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to memory management on s390 systems. The lowcore region was incorrectly mapped with the identity mapping, potentially leading to successful NULL pointer accesses instead of expected exceptions. This occurred regardless of the
relocate lowcore command line option, and in cases where the option was specified, the lowcore was mapped twice. The issue was addressed by preventing the mapping of the first two pages of physical memory with the identity mapping.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾