CVE-2025-68292

An information leak vulnerability was found in the Linux kernel's memfd hugetlb folio allocation. Allocated hugetlb folios are not zeroed before use, allowing disclosure of stale kernel memory to userspace. This is particularly impactful for udmabuf use cases where folios are directly accessed via DMA.

This flaw exposes uninitialized kernel memory contents to userspace through memfd hugetlb pages, representing a confidentiality breach. Exploitation requires ability to create memfd with hugetlb backing.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.