CVE-2025-71295

A flaw was found in the Linux kernel. This vulnerability occurs when the try_to_free_buffers() function is called on memory pages (folios) that do not have associated data buffers, specifically when certain conditions related to memory release operations are met. This can lead to a null pointer dereference, which may cause the system to crash, resulting in a Denial of Service (DoS).

This flaw is rated as Moderate because exploitation requires local access and results solely in a denial of service (kernel crash) without compromising system confidentiality or integrity. On Red Hat Enterprise Linux systems, an unprivileged local user could potentially trigger this null pointer dereference during specific memory and page cache reclaim sequences. Because the issue cannot be triggered remotely and does not permit code execution or privilege escalation, the blast radius is constrained to local system availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.