CVE-2025-37958 mm/huge_memory: fix dereferencing invalid pmd migration entry

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses Vulnerabilities in Memory Management with CVEs Microsoft has published information on two critical vulnerabilities affecting memory management in their systems. CVE-2024-26987, published on May 1, 2024, addresses a deadlock issue when hugetlb_optimize_vmemmap is enabled, while CVE-2025-37958, published on May 20, 2025, fixes a problem with dereferencing an invalid pmd migration entry. These vulnerabilities could impact system stability and performance. 2 sources 41