Kernel Panic Vulnerability in Linux Packages: CVE-2025-38195
Summary
CVE-2025-38195: In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() ERROR INFO: CPU 25 Unable to handle kernel paging request at virtual address 0x0 ... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used across various distributions, including Debian 12 and 13. This vulnerability affects the kernel's handling of memory management, specifically in the context of huge page table entries, which can lead to system instability and crashes.
Vulnerability Detail
CVE-2025-38195 is a vulnerability in the Linux kernel that arises from a NULL-PMD (Page Middle Directory) reference in the huge_pte_offset() function. This can cause a kernel panic when the CPU attempts to access a null virtual address, leading to a system crash. The vulnerability is significant as it can disrupt system operations and compromise the reliability of applications relying on the kernel for memory management.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to prevent potential system crashes.
Conclusion
CVE-2025-38195 is a critical vulnerability in the Linux kernel that can lead to kernel panics and system instability. It is essential for users to update their Linux packages to the patched versions to mitigate the risks associated with this vulnerability. Regular monitoring using tools like Vulert can help ensure that your system remains secure against such vulnerabilities.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38195 is a vulnerability in the Linux kernel that can cause a kernel panic due to a NULL-PMD reference in memory management functions.
The vulnerability affects Linux packages in Debian 12 and 13.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
If exploited, this vulnerability can lead to system crashes and instability, affecting the performance of applications that depend on the Linux kernel.
Yes, users should update their Linux packages to the latest versions to apply the patch for CVE-2025-38195.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
