Kernel Panic Vulnerability in Linux Package: CVE-2025-39844
Summary
CVE-2025-39844: In the Linux kernel, the following vulnerability has been resolved: mm: move page table sync declarations to linux/pgtable.h During our internal testing, we started observing intermittent boot failures when the machine u... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It supports various architectures and is widely used in servers, desktops, and embedded systems. This vulnerability affects the Linux package in Debian versions 12, 13, and 14, particularly when using 4-level paging with a large amount of persistent memory.
Vulnerability Detail
CVE-2025-39844 is a vulnerability in the Linux kernel that leads to intermittent boot failures when using 4-level paging. The issue arises during the initialization of the vmemmap area, where the kernel fails to synchronize top-level page tables, resulting in a kernel panic. This can cause the system to become unresponsive or crash, posing a significant risk to system stability and data integrity.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate the risk.
Conclusion
CVE-2025-39844 is a critical vulnerability in the Linux kernel that can lead to system crashes and instability. It is essential to update to the patched version to protect your system. Utilizing tools like Vulert can help you monitor and manage vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2025-39844 is a vulnerability in the Linux kernel that can cause kernel panics during system boot when using 4-level paging with persistent memory.
This vulnerability can lead to intermittent boot failures, causing your system to become unresponsive or crash, which may affect data integrity and system stability.
Debian versions 12, 13, and 14 are affected by this vulnerability in the Linux package.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Check your application against this vulnerability using the Vulert playground at Vulert Scanner.
While there are no specific workarounds, it is crucial to plan for an update to the patched version as soon as possible to mitigate risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
