Security tracker / CVE-2025-21907

CVE-2025-21907

mm: memory-failure: update ttu flag inside unmap_poisoned_folio

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 6da6b1d4a7df ("mm/hwpoison: convert TTU_IGNORE_HWPOISON to
 carnil> TTU_HWPOISON"). Vulnerable versions: 6.1.16 6.2.3 6.3.

Bugs

Status

Branch	Status
upstream	released (6.14-rc6) [b81679b1633aa43c0d973adfa816d78c1ed0d032]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.13-upstream-stable	released (6.13.7) [425c12c076e6fc6b2cb04b9f960319d31dcabc76]
6.12-upstream-stable	released (6.12.19) [608cc7deb428f1122ed426060233622ebf667b6e]
6.6-upstream-stable	needed
6.1-upstream-stable	needed
5.10-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.12.19-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	N/A "Vulnerable code not present"