Security tracker / CVE-2025-22090

CVE-2025-22090

x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in d155df53f310 ("x86/mm/pat: clear VM_PAT if copy_p4d_range failed")
 carnil> 2ab640379a0a ("x86: PAT: hooks in generic vm code to help archs to track pfnmap
 carnil> regions - v3"). Vulnerable versions: 2.6.29.

Bugs

Status

Branch	Status
upstream	released (6.15-rc1) [dc84bc2aba85a1508f04a936f9f9a15f64ebfb31]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.13-upstream-stable	released (6.13.11) [da381c33f3aa6406406c9fdf07b8b0b63e0ce722]
6.12-upstream-stable	released (6.12.23) [8d6373f83f367dbed316ddeb178130a3a64b5b67]
6.6-upstream-stable	released (6.6.87) [b07398e8a5da517083f5c3f2daa8f6681b48ab28]
6.1-upstream-stable	needed
5.10-upstream-stable	needed
sid	released (6.12.25-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	needed