AZL-63983
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-63983.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-63983
- Upstream
- Published
- 2025-06-18T10:15:40Z
- Modified
- 2026-04-21T04:32:15.954063Z
- Summary
- CVE-2025-38071 affecting package kernel for versions less than 6.6.96.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Check return value from memblockphysalloc_range()
At least with CONFIGPHYSICALSTART=0x100000, if there is < 4 MiB of contiguous free memory available at this point, the kernel will crash and burn because memblockphysallocrange() returns 0 on failure, which leads memblockphys_free() to throw the first 4 MiB of physical memory to the wolves.
At a minimum it should fail gracefully with a meaningful diagnostic, but in fact everything seems to work fine without the weird reserve allocation.
- References