🛡️ AZL-74835 — kernel

⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

CVE-2025-39845 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()

Define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() to ensure

page tables are properly synchronized when calling p*d_populate_kernel().

For 5-level paging, synchronization is performed via

pgd_populate_kernel(). In 4-level paging, pgd_populate() is a no-op, so

synchronization is instead performed at the P4D level via

p4d_populate_kernel().

This fixes intermittent boot failures on systems using 4-level paging and

a large amount of persistent memory:

BUG: unable to handle page fault for address: ffffe70000000034

#PF: supervisor write access in kernel mode

#PF: error_code(0x0002) - not-present page

PGD 0 P4D 0

Oops: 0002 [#1] SMP NOPTI

RIP: 0010:__init_single_page+0x9/0x6d

Call Trace:

<TASK>

__init_zone_device_page+0x17/0x5d

memmap_init_zone_device+0x154/0x1bb

pagemap_range+0x2e0/0x40f

memremap_pages+0x10b/0x2f0

devm_memremap_pages+0x1e/0x60

dev_dax_probe+0xce/0x2ec [device_dax]

dax_bus_probe+0x6d/0xc9

[... snip ...]

</TASK>

It also fixes a crash in vmemmap_set_pmd() caused by accessing vmemmap

before sync_global_pgds() [1]:

BUG: unable to handle page fault for address: ffffeb3ff1200000

#PF: supervisor write access in kernel mode

#PF: error_code(0x0002) - not-present page

PGD 0 P4D 0

Oops: Oops: 0002 [#1] PREEMPT SMP NOPTI

Tainted: [W]=WARN

RIP: 0010:vmemmap_set_pmd+0xff/0x230

<TASK>

vmemmap_populate_hugepages+0x176/0x180

vmemmap_populate+0x34/0x80

__populate_section_memmap+0x41/0x90

sparse_add_section+0x121/0x3e0

__add_pages+0xba/0x150

add_pages+0x1d/0x70

memremap_pages+0x3dc/0x810

devm_memremap_pages+0x1c/0x60

xe_devm_add+0x8b/0x100 [xe]

xe_tile_init_noalloc+0x6a/0x70 [xe]

xe_device_probe+0x48c/0x740 [xe]

[... snip ...]

Affected software

AZL-74835 is recorded against 1 package.

  • kernel (fixed in 5.15.200.1-1)

Timeline and source

Published on 19 September 2025 and last revised on 21 April 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

nvd.nist.gov (Web)

Details

Severity Unknown
CVSS Score N/A
CVSS Vector N/A
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2025-09-19
Updated 2026-08-12
Modified 2026-04-21
Fix URL N/A

Affected Packages

Software From version Fixed in
kernel — 5.15.200.1-1

Similar Threats

Free Vulnerability Check

Is your site affected by AZL-74835?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against AZL-74835 and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.