目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CVE-2025-39883— Linux kernel 安全漏洞

AI 预测 5.5 利用难度: 困难 EPSS 0.14% · P4

影响版本矩阵 18

厂商产品版本范围状态
LinuxLinuxf1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe< 8e01ea186a52c90694c08a9ff57bea1b0e78256aaffected
f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe< fb65803ccff37cf9123c50c1c02efd1ed73c4ed5affected
f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe< 99f7048957f5ae3cee1c01189147e73a9a96de02affected
f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe< e4ec6def5643a1c9511115b3884eb879572294c6affected
f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe< 3d278e89c2ea62b1aaa4b0d8a9766a35b3a3164aaffected
f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe< 7618fd443aa4cfa553a64cacf5721581653ee7b0affected
f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe< 63a327a2375a8ce7a47dec5aaa4d8a9ae0a00b96affected
f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe< d613f53c83ec47089c4e25859d5e8e0359f6f8daaffected
… +10 条更多
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2025-39883 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory When I did memory failure tests, below panic occurs: page dumped because: VM_BUG_ON_PAGE(PagePoisoned(page)) kernel BUG at include/linux/page-flags.h:616! Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 720 Comm: bash Not tainted 6.10.0-rc1-00195-g148743902568 #40 RIP: 0010:unpoison_memory+0x2f3/0x590 RSP: 0018:ffffa57fc8787d60 EFLAGS: 00000246 RAX: 0000000000000037 RBX: 0000000000000009 RCX: ffff9be25fcdc9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff9be25fcdc9c0 RBP: 0000000000300000 R08: ffffffffb4956f88 R09: 0000000000009ffb R10: 0000000000000284 R11: ffffffffb4926fa0 R12: ffffe6b00c000000 R13: ffff9bdb453dfd00 R14: 0000000000000000 R15: fffffffffffffffe FS: 00007f08f04e4740(0000) GS:ffff9be25fcc0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564787a30410 CR3: 000000010d4e2000 CR4: 00000000000006f0 Call Trace: <TASK> unpoison_memory+0x2f3/0x590 simple_attr_write_xsigned.constprop.0.isra.0+0xb3/0x110 debugfs_attr_write+0x42/0x60 full_proxy_write+0x5b/0x80 vfs_write+0xd5/0x540 ksys_write+0x64/0xe0 do_syscall_64+0xb9/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f08f0314887 RSP: 002b:00007ffece710078 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f08f0314887 RDX: 0000000000000009 RSI: 0000564787a30410 RDI: 0000000000000001 RBP: 0000564787a30410 R08: 000000000000fefe R09: 000000007fffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 R13: 00007f08f041b780 R14: 00007f08f0417600 R15: 00007f08f0416a00 </TASK> Modules linked in: hwpoison_inject ---[ end trace 0000000000000000 ]--- RIP: 0010:unpoison_memory+0x2f3/0x590 RSP: 0018:ffffa57fc8787d60 EFLAGS: 00000246 RAX: 0000000000000037 RBX: 0000000000000009 RCX: ffff9be25fcdc9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff9be25fcdc9c0 RBP: 0000000000300000 R08: ffffffffb4956f88 R09: 0000000000009ffb R10: 0000000000000284 R11: ffffffffb4926fa0 R12: ffffe6b00c000000 R13: ffff9bdb453dfd00 R14: 0000000000000000 R15: fffffffffffffffe FS: 00007f08f04e4740(0000) GS:ffff9be25fcc0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564787a30410 CR3: 000000010d4e2000 CR4: 00000000000006f0 Kernel panic - not syncing: Fatal exception Kernel Offset: 0x31c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) ---[ end Kernel panic - not syncing: Fatal exception ]--- The root cause is that unpoison_memory() tries to check the PG_HWPoison flags of an uninitialized page. So VM_BUG_ON_PAGE(PagePoisoned(page)) is triggered. This can be reproduced by below steps: 1.Offline memory block: echo offline > /sys/devices/system/memory/memory12/state 2.Get offlined memory pfn: page-types -b n -rlN 3.Write pfn to unpoison-pfn echo <pfn> > /sys/kernel/debug/hwpoison/unpoison-pfn This scenario can be identified by pfn_to_online_page() returning NULL. And ZONE_DEVICE pages are never expected, so we can simply fail if pfn_to_online_page() == NULL to fix the bug.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于内存取消毒处理不当，可能导致空指针取消引用。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商产品影响版本CPE订阅
LinuxLinux f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe ~ 8e01ea186a52c90694c08a9ff57bea1b0e78256a -
LinuxLinux 4.13 -

二、漏洞 CVE-2025-39883 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2025-39883 的情报信息

请登录查看更多情报信息。

CVE-2025-39883 补丁与修复 (3)

同批安全公告 · Linux · 2025-09-23 · 共 21 条

CVE-2025-398809.8 CRITICALLinux kernel 安全漏洞
CVE-2025-398698.4 HIGHLinux kernel 安全漏洞
CVE-2025-398828.4 HIGHLinux kernel 安全漏洞
CVE-2025-398887.8 HIGHLinux kernel 安全漏洞
CVE-2025-398727.8 HIGHLinux kernel 安全漏洞
CVE-2025-398737.8 HIGHLinux kernel 安全漏洞
CVE-2025-398687.8 HIGHLinux kernel 安全漏洞
CVE-2025-398817.8 HIGHLinux kernel 安全漏洞
CVE-2025-39879Linux kernel 安全漏洞
CVE-2025-39887Linux kernel 安全漏洞
CVE-2025-39885Linux kernel 安全漏洞
CVE-2025-39886Linux kernel 安全漏洞
CVE-2025-39884Linux kernel 安全漏洞
CVE-2025-39878Linux kernel 安全漏洞
CVE-2025-39877Linux kernel 安全漏洞
CVE-2025-39876Linux kernel 安全漏洞
CVE-2025-39874Linux kernel 安全漏洞
CVE-2025-39875Linux kernel 安全漏洞
CVE-2025-39871Linux kernel 安全漏洞
CVE-2025-39870Linux kernel 安全漏洞

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-39883

暂无评论

发表评论