CVE-2025-40006

A flaw was found in the Linux kernel. A race condition between memory deallocation (hole-punching) and page migration in the HugeTLB filesystem (hugetlbfs) can lead to a Denial of Service (DoS). A local user with permissions to modify hugetlbfs files can exploit this vulnerability by executing concurrent memory operations without proper locking, causing page cache corruption and triggering a system crash.

A race between hugetlbfs hole-punch and page migration could let remove_inode_hugepages() observe an unmapped page without holding the page lock and proceed while the page gets re-mapped, triggering a kernel BUG (DoS). Triggering requires local access with permissions to create/modify hugetlbfs files and precise timing to win the race. There is no data leakage or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.