[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-38084":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":19,"duplicate_of":9,"upstream":20,"downstream":21,"duplicates":140,"related":141,"reserved_at":9,"published_at":163,"modified_at":164,"state":165,"summary":166,"references_raw":175,"kevs":219,"epss":220,"epss_history":223,"metrics":496,"affected":502},"CVE-2025-38084","In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: unshare page tables during VMA split, not before\n\nCurrently, __split_vma() triggers hugetlb page table unsharing through\nvm_ops->may_split().  This happens before the VMA lock and rmap locks are\ntaken - which is too early, it allows racing VMA-locked page faults in our\nprocess and racing rmap walks from other processes to cause page tables to\nbe shared again before we actually perform the split.\n\nFix it by explicitly calling into the hugetlb unshare logic from\n__split_vma() in the same place where THP splitting also happens.  At that\npoint, both the VMA and the rmap(s) are write-locked.\n\nAn annoying detail is that we can now call into the helper\nhugetlb_unshare_pmds() from two different locking contexts:\n\n1. from hugetlb_split(), holding:\n    - mmap lock (exclusively)\n    - VMA lock\n    - file rmap lock (exclusively)\n2. hugetlb_unshare_all_pmds(), which I think is designed to be able to\n   call us with only the mmap lock held (in shared mode), but currently\n   only runs while holding mmap lock (exclusively) and VMA lock\n\nBackporting note:\nThis commit fixes a racy protection that was introduced in commit\nb30c14cd6102 (\"hugetlb: unshare some PMDs when splitting VMAs\"); that\ncommit claimed to fix an issue introduced in 5.13, but it should actually\nalso go all the way back.\n\n[jannh@google.com: v2]",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],[],[],[],[22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138],{"_key":23},"SUSE-SU-2025:02853-1",{"_key":25},"SUSE-SU-2025:02923-1",{"_key":27},"SUSE-SU-2025:03628-1",{"_key":29},"SUSE-SU-2025:3716-1",{"_key":31},"SUSE-SU-2025:4320-1",{"_key":33},"SUSE-SU-2025:02969-1",{"_key":35},"SUSE-SU-2025:03023-1",{"_key":37},"DLA-4327-1",{"_key":39},"DLA-4328-1",{"_key":41},"DSA-5973-1",{"_key":43},"RHSA-2025:13598",{"_key":45},"RHSA-2025:13962",{"_key":47},"SUSE-SU-2025:02997-1",{"_key":49},"SUSE-SU-2025:03011-1",{"_key":51},"SUSE-SU-2025:20577-1",{"_key":53},"SUSE-SU-2025:20586-1",{"_key":55},"SUSE-SU-2025:20601-1",{"_key":57},"SUSE-SU-2025:20602-1",{"_key":59},"SUSE-SU-2025:4149-1",{"_key":61},"SUSE-SU-2026:20012-1",{"_key":63},"SUSE-SU-2026:20015-1",{"_key":65},"SUSE-SU-2026:20021-1",{"_key":67},"SUSE-SU-2025:02996-1",{"_key":69},"OPENSUSE-SU-2025:20172-1",{"_key":71},"MGASA-2025-0218",{"_key":73},"MGASA-2025-0219",{"_key":75},"DEBIAN-CVE-2025-38084",{"_key":77},"USN-8028-1",{"_key":79},"USN-8028-2",{"_key":81},"USN-8028-3",{"_key":83},"USN-8028-4",{"_key":85},"USN-8028-5",{"_key":87},"USN-8028-6",{"_key":89},"USN-8028-7",{"_key":91},"USN-8028-8",{"_key":93},"USN-8031-1",{"_key":95},"USN-8031-2",{"_key":97},"USN-8031-3",{"_key":99},"USN-8052-1",{"_key":101},"USN-8052-2",{"_key":103},"USN-8074-1",{"_key":105},"USN-8074-2",{"_key":107},"USN-8126-1",{"_key":109},"UBUNTU-CVE-2025-38084",{"_key":111},"USN-7774-1",{"_key":113},"USN-7774-2",{"_key":115},"USN-7774-3",{"_key":117},"USN-7774-4",{"_key":119},"USN-7774-5",{"_key":121},"USN-7775-1",{"_key":123},"USN-7775-2",{"_key":125},"USN-7775-3",{"_key":127},"USN-7776-1",{"_key":129},"USN-7833-1",{"_key":131},"USN-7833-2",{"_key":133},"USN-7833-3",{"_key":135},"USN-7833-4",{"_key":137},"USN-7834-1",{"_key":139},"USN-7856-1",[],[142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162],{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":65},{"_key":67},{"_key":69},{"_key":71},{"_key":73},"2025-06-28T07:44:25.379Z","2026-05-11T21:20:56.635Z","Analyzed",{"cisa_kev":167,"cisa_ransomware":167,"cisa_vendor":9,"epss_severity":168,"epss_score":169,"severity":170,"severity_score":171,"severity_version":172,"severity_source":173,"severity_vector":174,"severity_status":165},false,"low",0.00092,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[176,182,186,190,194,198,202,206,211,215],{"url":177,"sources":178,"tags":180},"https://git.kernel.org/stable/c/e8847d18cd9fff1edbb45e963d9141273c3b539c",[179,173],"cve.org",[181],"Patch",{"url":183,"sources":184,"tags":185},"https://git.kernel.org/stable/c/366298f2b04d2bf1f2f2b7078405bdf9df9bd5d0",[179,173],[181],{"url":187,"sources":188,"tags":189},"https://git.kernel.org/stable/c/2511ac64bc1617ca716d3ba8464e481a647c1902",[179,173],[181],{"url":191,"sources":192,"tags":193},"https://git.kernel.org/stable/c/af6cfcd0efb7f051af221c418ec8b37a10211947",[179,173],[181],{"url":195,"sources":196,"tags":197},"https://git.kernel.org/stable/c/9cf5b2a3b72c23fb7b84736d5d19ee6ea718762b",[179,173],[181],{"url":199,"sources":200,"tags":201},"https://git.kernel.org/stable/c/8a21d5584826f4880f45bbf8f72375f4e6c0ff2a",[179,173],[181],{"url":203,"sources":204,"tags":205},"https://git.kernel.org/stable/c/081056dc00a27bccb55ccc3c6f230a3d5fd3f7e0",[179,173],[181],{"url":207,"sources":208,"tags":209},"https://project-zero.issues.chromium.org/issues/420715744",[179,173],[210],"Third Party Advisory",{"url":212,"sources":213,"tags":214},"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html",[179,173],[210],{"url":216,"sources":217,"tags":218},"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html",[179,173],[210],[],{"date":221,"score":169,"percentile":222},"2026-06-03",0.25826,[224,228,231,234,237,239,242,245,248,251,254,256,259,262,265,269,272,275,278,280,283,287,291,294,297,300,303,306,309,312,315,318,321,325,328,331,334,337,340,343,346,349,352,355,358,361,365,369,372,375,378,381,384,386,390,393,396,399,402,405,408,411,414,417,420,422,425,428,431,434,437,440,443,446,449,451,454,457,460,463,466,469,472,475,478,481,484,487,490,493],{"date":225,"score":226,"percentile":227},"2025-11-04",0.00114,0.30814,{"date":229,"score":226,"percentile":230},"2025-11-05",0.30791,{"date":232,"score":226,"percentile":233},"2025-11-06",0.30795,{"date":235,"score":226,"percentile":236},"2025-11-07",0.30803,{"date":238,"score":226,"percentile":236},"2025-11-08",{"date":240,"score":226,"percentile":241},"2025-11-09",0.30783,{"date":243,"score":226,"percentile":244},"2025-11-10",0.30738,{"date":246,"score":226,"percentile":247},"2025-11-11",0.30753,{"date":249,"score":226,"percentile":250},"2025-11-12",0.30797,{"date":252,"score":226,"percentile":253},"2025-11-13",0.30811,{"date":255,"score":226,"percentile":227},"2025-11-14",{"date":257,"score":226,"percentile":258},"2025-11-15",0.3081,{"date":260,"score":226,"percentile":261},"2025-11-16",0.30782,{"date":263,"score":226,"percentile":264},"2025-11-17",0.30762,{"date":266,"score":267,"percentile":268},"2025-11-18",0.00079,0.19576,{"date":270,"score":267,"percentile":271},"2025-11-19",0.19599,{"date":273,"score":267,"percentile":274},"2025-11-20",0.19582,{"date":276,"score":226,"percentile":277},"2025-11-21",0.30805,{"date":279,"score":226,"percentile":253},"2025-11-22",{"date":281,"score":226,"percentile":282},"2025-11-23",0.30778,{"date":284,"score":285,"percentile":286},"2025-11-24",0.00073,0.22318,{"date":288,"score":289,"percentile":290},"2025-11-25",0.0007,0.21524,{"date":292,"score":289,"percentile":293},"2025-11-26",0.21513,{"date":295,"score":289,"percentile":296},"2025-11-27",0.21476,{"date":298,"score":289,"percentile":299},"2025-11-28",0.21452,{"date":301,"score":289,"percentile":302},"2025-11-29",0.21438,{"date":304,"score":289,"percentile":305},"2025-11-30",0.21429,{"date":307,"score":289,"percentile":308},"2025-12-01",0.21477,{"date":310,"score":289,"percentile":311},"2025-12-02",0.21494,{"date":313,"score":289,"percentile":314},"2025-12-03",0.21503,{"date":316,"score":289,"percentile":317},"2025-12-04",0.21445,{"date":319,"score":289,"percentile":320},"2025-12-05",0.21488,{"date":322,"score":323,"percentile":324},"2025-12-06",0.00109,0.29786,{"date":326,"score":323,"percentile":327},"2025-12-07",0.29758,{"date":329,"score":323,"percentile":330},"2025-12-08",0.29764,{"date":332,"score":323,"percentile":333},"2025-12-09",0.29823,{"date":335,"score":323,"percentile":336},"2025-12-10",0.29888,{"date":338,"score":323,"percentile":339},"2025-12-11",0.29918,{"date":341,"score":323,"percentile":342},"2025-12-12",0.2994,{"date":344,"score":323,"percentile":345},"2025-12-13",0.29943,{"date":347,"score":323,"percentile":348},"2025-12-14",0.2992,{"date":350,"score":323,"percentile":351},"2025-12-15",0.29889,{"date":353,"score":323,"percentile":354},"2025-12-16",0.29906,{"date":356,"score":323,"percentile":357},"2025-12-17",0.29954,{"date":359,"score":323,"percentile":360},"2025-12-18",0.30005,{"date":362,"score":363,"percentile":364},"2025-12-19",0.00032,0.08885,{"date":366,"score":367,"percentile":368},"2025-12-20",0.00031,0.08681,{"date":370,"score":367,"percentile":371},"2025-12-21",0.08623,{"date":373,"score":367,"percentile":374},"2025-12-22",0.08575,{"date":376,"score":367,"percentile":377},"2025-12-23",0.08573,{"date":379,"score":367,"percentile":380},"2025-12-24",0.08588,{"date":382,"score":367,"percentile":383},"2025-12-25",0.08665,{"date":385,"score":367,"percentile":383},"2025-12-26",{"date":387,"score":388,"percentile":389},"2025-12-27",0.00025,0.06154,{"date":391,"score":367,"percentile":392},"2025-12-28",0.08662,{"date":394,"score":367,"percentile":395},"2025-12-29",0.08638,{"date":397,"score":388,"percentile":398},"2025-12-30",0.06161,{"date":400,"score":388,"percentile":401},"2025-12-31",0.0622,{"date":403,"score":388,"percentile":404},"2026-01-01",0.06286,{"date":406,"score":388,"percentile":407},"2026-01-02",0.0628,{"date":409,"score":388,"percentile":410},"2026-01-03",0.06261,{"date":412,"score":388,"percentile":413},"2026-01-04",0.06177,{"date":415,"score":388,"percentile":416},"2026-01-05",0.06126,{"date":418,"score":388,"percentile":419},"2026-01-06",0.06133,{"date":421,"score":388,"percentile":389},"2026-01-07",{"date":423,"score":388,"percentile":424},"2026-01-08",0.06212,{"date":426,"score":388,"percentile":427},"2026-01-09",0.06209,{"date":429,"score":388,"percentile":430},"2026-01-10",0.06211,{"date":432,"score":388,"percentile":433},"2026-01-11",0.06218,{"date":435,"score":388,"percentile":436},"2026-01-12",0.06198,{"date":438,"score":388,"percentile":439},"2026-01-13",0.06184,{"date":441,"score":388,"percentile":442},"2026-01-14",0.06236,{"date":444,"score":388,"percentile":445},"2026-01-15",0.06243,{"date":447,"score":388,"percentile":448},"2026-01-16",0.06253,{"date":450,"score":388,"percentile":410},"2026-01-17",{"date":452,"score":388,"percentile":453},"2026-01-18",0.0626,{"date":455,"score":388,"percentile":456},"2026-01-19",0.06239,{"date":458,"score":388,"percentile":459},"2026-01-20",0.06197,{"date":461,"score":388,"percentile":462},"2026-01-21",0.0619,{"date":464,"score":388,"percentile":465},"2026-01-22",0.05948,{"date":467,"score":388,"percentile":468},"2026-01-23",0.06007,{"date":470,"score":388,"percentile":471},"2026-01-24",0.06059,{"date":473,"score":388,"percentile":474},"2026-01-25",0.06009,{"date":476,"score":388,"percentile":477},"2026-01-26",0.05993,{"date":479,"score":388,"percentile":480},"2026-01-27",0.0597,{"date":482,"score":388,"percentile":483},"2026-01-28",0.0595,{"date":485,"score":388,"percentile":486},"2026-01-29",0.0596,{"date":488,"score":388,"percentile":489},"2026-01-30",0.05964,{"date":491,"score":388,"percentile":492},"2026-01-31",0.05941,{"date":494,"score":388,"percentile":495},"2026-02-01",0.05994,[497],{"source":173,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":498,"cvss_v4_0":9},{"baseScore":171,"baseSeverity":499,"vectorString":174,"impactScore":500,"exploitabilityScore":501},"MEDIUM",6,4.6,[503,512,544],{"ecosystem":9,"name":504,"vendor":505,"product":506,"cpe_part":507,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":508},"debian linux","debian","debian_linux","o",[509],{"version":510,"is_range":167,"range_type":511,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0","cpe",{"ecosystem":9,"name":513,"vendor":514,"product":514,"cpe_part":515,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":516},"Linux","linux","a",[517,524,527,530,533,536,539,542],{"version":518,"is_range":519,"range_type":179,"version_start":520,"version_start_type":521,"version_end":522,"version_end_type":523,"fixed_in":9},">= 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa, \u003C e8847d18cd9fff1edbb45e963d9141273c3b539c",true,"39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa","including","e8847d18cd9fff1edbb45e963d9141273c3b539c","excluding",{"version":525,"is_range":519,"range_type":179,"version_start":520,"version_start_type":521,"version_end":526,"version_end_type":523,"fixed_in":9},">= 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa, \u003C 366298f2b04d2bf1f2f2b7078405bdf9df9bd5d0","366298f2b04d2bf1f2f2b7078405bdf9df9bd5d0",{"version":528,"is_range":519,"range_type":179,"version_start":520,"version_start_type":521,"version_end":529,"version_end_type":523,"fixed_in":9},">= 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa, \u003C 2511ac64bc1617ca716d3ba8464e481a647c1902","2511ac64bc1617ca716d3ba8464e481a647c1902",{"version":531,"is_range":519,"range_type":179,"version_start":520,"version_start_type":521,"version_end":532,"version_end_type":523,"fixed_in":9},">= 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa, \u003C af6cfcd0efb7f051af221c418ec8b37a10211947","af6cfcd0efb7f051af221c418ec8b37a10211947",{"version":534,"is_range":519,"range_type":179,"version_start":520,"version_start_type":521,"version_end":535,"version_end_type":523,"fixed_in":9},">= 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa, \u003C 9cf5b2a3b72c23fb7b84736d5d19ee6ea718762b","9cf5b2a3b72c23fb7b84736d5d19ee6ea718762b",{"version":537,"is_range":519,"range_type":179,"version_start":520,"version_start_type":521,"version_end":538,"version_end_type":523,"fixed_in":9},">= 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa, \u003C 8a21d5584826f4880f45bbf8f72375f4e6c0ff2a","8a21d5584826f4880f45bbf8f72375f4e6c0ff2a",{"version":540,"is_range":519,"range_type":179,"version_start":520,"version_start_type":521,"version_end":541,"version_end_type":523,"fixed_in":9},">= 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa, \u003C 081056dc00a27bccb55ccc3c6f230a3d5fd3f7e0","081056dc00a27bccb55ccc3c6f230a3d5fd3f7e0",{"version":543,"is_range":167,"range_type":179,"version_start":543,"version_start_type":521,"version_end":543,"version_end_type":521,"fixed_in":9},"2.6.20",{"ecosystem":9,"name":545,"vendor":514,"product":546,"cpe_part":507,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":547},"linux kernel","linux_kernel",[548,551,555,559,563,567],{"version":549,"is_range":519,"range_type":511,"version_start":543,"version_start_type":521,"version_end":550,"version_end_type":523,"fixed_in":9},"gte2.6.20_lt5.10.239","5.10.239",{"version":552,"is_range":519,"range_type":511,"version_start":553,"version_start_type":521,"version_end":554,"version_end_type":523,"fixed_in":9},"gte5.11_lt5.15.186","5.11","5.15.186",{"version":556,"is_range":519,"range_type":511,"version_start":557,"version_start_type":521,"version_end":558,"version_end_type":523,"fixed_in":9},"gte5.16_lt6.1.142","5.16","6.1.142",{"version":560,"is_range":519,"range_type":511,"version_start":561,"version_start_type":521,"version_end":562,"version_end_type":523,"fixed_in":9},"gte6.2_lt6.6.95","6.2","6.6.95",{"version":564,"is_range":519,"range_type":511,"version_start":565,"version_start_type":521,"version_end":566,"version_end_type":523,"fixed_in":9},"gte6.7_lt6.12.35","6.7","6.12.35",{"version":568,"is_range":519,"range_type":511,"version_start":569,"version_start_type":521,"version_end":570,"version_end_type":523,"fixed_in":9},"gte6.13_lt6.15.4","6.13","6.15.4"]