CVE-2025-22034

A flaw was found in the Linux kernel's memory management subsystem. A local user could exploit this vulnerability to cause a Denial of Service (DoS) by crashing the system. This issue occurs during device-exclusive memory operations on hugetlb (Huge Translation Lookaside Buffer) mappings, where the kernel improperly attempts to split huge pages and triggers a kernel panic.

This vulnerability is rated as Low severity for Red Hat Enterprise Linux because exploitation requires local authenticated access alongside specific hardware drivers utilizing heterogeneous memory management features on hugepage mappings. An invalid page split operation on hugetlb regions results in a local denial of service via a kernel crash, without enabling privilege escalation or data disclosure. Earlier enterprise distributions, including Red Hat Enterprise Linux 8 and 9, are unaffected because the vulnerable code path is not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.