CVE-2025-40311

CVE-2025-40311

published December 8, 2025

CVSS
—
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

accel/habanalabs: support mapping cb with vmalloc-backed coherent memory

When IOMMU is enabled, dma_alloc_coherent() with GFP_USER may return

addresses from the vmalloc range. If such an address is mapped without

VM_MIXEDMAP, vm_insert_page() will trigger a BUG_ON due to the

VM_PFNMAP restriction.

Fix this by checking for vmalloc addresses and setting VM_MIXEDMAP

in the VMA before mapping. This ensures safe mapping and avoids kernel

crashes. The memory is still driver-allocated and cannot be accessed

directly by userspace.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.8th percentile
Published
2025-12-08T06:16Z
References (4)
EPSS history
Timeline
  • 08 DEC 00:46Z
    accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
    cvelistv5