Kernel Panic Vulnerability in Linux Package: LoongArch NULL-PMD Issue
Summary
DEBIAN-CVE-2025-38195: In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() ERROR INFO: CPU 25 Unable to handle kernel paging request at virtual address 0x0 ... Affects linux versions < 6.12.35-1. Fixed in 6.12.35-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing system resources and hardware interactions. It is widely used across various distributions and versions of Linux. The package is known for its stability and performance, but like any complex software, it can be susceptible to vulnerabilities that may affect system reliability and security.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified that can lead to a kernel panic due to a NULL-PMD in the huge_pte_offset() function. This issue arises when the page middle directory (PMD) is NULL, causing the CPU to be unable to handle kernel paging requests at virtual address 0x0. The call trace indicates that this vulnerability can lead to system crashes and instability, particularly when handling huge pages in memory management.
How To Fix
Minimum fixed version
6.12.35-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk.
Conclusion
The identified vulnerability in the Linux kernel poses a significant risk of kernel panic due to a NULL-PMD issue. It is crucial for users to update to the patched version 6.12.35-1 to ensure system stability and security. Monitoring tools like Vulert can assist in identifying vulnerabilities in your software.
See every vulnerability recorded for linux →
FAQ
This vulnerability can cause kernel panics, leading to system crashes and potential data loss.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, the patched version of the Linux package is 6.12.35-1. Updating to this version will resolve the issue.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to avoid potential system instability.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-38195.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
