PT-2025-51697 · Linux+3 · Linux Kernel+3

CVE-2025-68293

·

Published

2025-11-19

·

Updated

2026-08-30

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel’s memory management subsystem, specifically within the huge memory handling related to folio splitting. A NULL pointer dereference can occur when splitting a folio, particularly in scenarios involving shared memory folios in the swap cache or truncated folios. This issue was introduced by commit c010d47f107f, which added a check on the folio’s order via mapping->flags before proceeding with the split. The check fails to account for cases where the mapping pointer is NULL, leading to a crash when attempting to access mapping->flags.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-10625
CVE-2025-68293
OESA-2026-1566
OESA-2026-1567
OESA-2026-1570
OPENSUSE-SU-2026:20145-1
SUSE-SU-2026:20207-1
SUSE-SU-2026:20220-1
SUSE-SU-2026:20228-1
SUSE-SU-2026:20564-1
USN-8094-1
USN-8094-2
USN-8094-3
USN-8094-4
USN-8094-5
USN-8152-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu