Memory Management Vulnerability in Linux Kernel: CVE-2025-37834
Summary
CVE-2025-37834: In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: don't try to reclaim hwpoison folio Syzkaller reports a bug as follows: Injecting memory failure for pfn 0x18b00e at process virtual address... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware resources and providing essential services for software applications. It is known for its stability, performance, and security features. However, vulnerabilities can arise, such as CVE-2025-37834, which affects memory management, particularly in handling hardware-poisoned pages.
Vulnerability Detail
CVE-2025-37834 is a vulnerability in the Linux kernel's memory management subsystem, specifically in the mm/vmscan module. It occurs when a dirty swapcache page is isolated by the reclaim process but is not locked. If a memory failure is injected for this page, it can lead to a situation where the page is never freed and remains in the least recently used (LRU) list indefinitely. This can cause kernel bugs and system instability, as the reclaim process may attempt to reclaim this page, triggering a VM_BUG_ON_FOLIO error due to the uptodate flag being cleared.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it becomes available to mitigate risks.
Conclusion
CVE-2025-37834 is a significant vulnerability in the Linux kernel that affects memory management. It is essential for users to stay informed about updates and apply patches promptly to ensure system stability and security. Utilizing tools like Vulert can help in monitoring vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37834 is a vulnerability in the Linux kernel that affects memory management, particularly in handling hardware-poisoned pages.
The vulnerability can lead to kernel bugs, system instability, and the possibility of memory leaks, as affected pages may never be freed.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Yes, a patch is expected to be released. Users should update their Linux kernel to the latest version to ensure they have the fix.
While there are no specific workarounds, it is crucial to monitor for updates and apply them as soon as possible to mitigate risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
