VDB

CVE-2025-22000

CVE-2025-22000 PUBLISHED CVSS 5.5 MEDIUM

mm/huge_memory: drop beyond-EOF folios with the right number of refs

Reported by linux · Published April 3, 2025

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: drop beyond-EOF folios with the right number of refs When an after-split folio is large and needs to be dropped due to EOF, folio_put_refs(folio, folio_nr_pages(folio)) should be used to drop all page cache refs. Otherwise, the folio will not be freed, causing memory leak. This leak would happen on a filesystem with blocksize > page_size and a truncate is performed, where the blocksize makes folios split to >0 order ones, causing truncated folios not being freed.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
kernel-libbpf-develAmazon Linux6.12.22-27.96.amzn2023
kernel-modules-extra-commonAmazon Linux6.12.22-27.96.amzn2023
kernel6.12Amazon Linux6.12.22-27.96.amzn2023
kernel6.12-modules-extraAmazon Linux6.12.22-27.96.amzn2023
perf6.12Amazon Linux6.12.22-27.96.amzn2023
kernel-headersAmazon Linux6.12.22-27.96.amzn2023
kernel-toolsAmazon Linux6.12.22-27.96.amzn2023
linux_kernellinux6.14, 6.13.9, 6.12.21
LinuxLinux6.9

Risk scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductVersions
LinuxLinuxc010d47f107f609b9f4d6a103b6dfc53889049e9, c010d47f107f609b9f4d6a103b6dfc53889049e9, c010d47f107f609b9f4d6a103b6dfc53889049e9
LinuxLinux6.9, 0, 6.12.21
amazon:2023kernel-libbpf-devel0
amazon:2023kernel-modules-extra-common0
amazon:2023kernel6.120
linuxlinux_kernel6.9, 6.9, 6.9
amazon:2023kernel6.12-modules-extra0
amazon:2023perf6.120
amazon:2023kernel-headers0
amazon:2023kernel-tools0
LinuxLinux*, 6.9, 0
amazon:2023kernel-devel0
amazon:2023python3-perf6.120
amazon:2023bpftool0
amazon:2023kernel-tools-devel0
amazon:2023kernel-libbpf-static0
amazon:2023kernel-libbpf0
amazon:2023kernel-livepatch-6.12.22-27.960

Timeline

  • Apr 2, 2025 CVE Published
  • Apr 3, 2025 EPSS Score (30 in total, the first dated here)
  • Jun 21, 2025 Coalition ESS Score (8 in total, the first dated here)
  • Dec 21, 2025 Security Advisory (132 in total, the first dated here)
  • Dec 21, 2025 CVE Updated
  • Apr 29, 2026 Distribution Patch (114 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2025-22000
vulnetix vdb fixes CVE-2025-22000

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-22000/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›