x86/mm: Check return value from memblock_phys_alloc_range()
CVE-2025-38071 is fixed in 68 products on 1 platform, first by DEBIAN-CVE-2025-38071, released June 18, 2025. It is not reported as exploited. Patch Radar priority: High.
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Check return value from memblock_phys_alloc_range() At least with CONFIG_PHYSICAL_START=0x100000, if there is < 4 MiB of contiguous free memory available at this point, the kernel will crash and burn because memblock_phys_alloc_range() returns 0 on failure, which leads memblock_phys_free() to throw the first 4 MiB of physical memory to the wolves. At a minimum it should fail gracefully with a meaningful diagnostic, but in fact everything seems to work fine without the weird reserve allocation.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| bpftool-debuginfo · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel · amzn 2023 | 6.1.141-155.222.amzn2023 | ALAS2023-2025-1037 | Jun 18, 2025 |
| kernel-debuginfo · amzn 2023 | 6.1.141-155.222.amzn2023 | ALAS2023-2025-1037 | Jun 18, 2025 |
| kernel-debuginfo-common-aarch64 · amzn 2023 | 6.1.141-155.222.amzn2023 | ALAS2023-2025-1037 | Jun 18, 2025 |
| kernel-debuginfo-common-x86_64 · amzn 2023 | 6.1.141-155.222.amzn2023 | ALAS2023-2025-1037 | Jun 18, 2025 |
| kernel-devel · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel-headers · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel-libbpf · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel-libbpf-debuginfo · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel-libbpf-devel · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel-libbpf-static · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel-livepatch-6.1.141-155.222 · amzn 2023 | 1.0-0.amzn2023 | ALAS2023-2025-1037 | Jun 18, 2025 |
| kernel-livepatch-6.12.31-35.92 · amzn 2023 | 1.0-0.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel-modules-extra · amzn 2023 | 6.1.141-155.222.amzn2023 | ALAS2023-2025-1037 | Jun 18, 2025 |
| kernel-modules-extra-common · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel-tools · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel-tools-debuginfo · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel-tools-devel · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel-uek · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-devel · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-devel · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-deprecated · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-deprecated · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-desktop · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-desktop · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra-netfilter · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra-netfilter · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-usb · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-usb · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-wireless · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-wireless · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-devel · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-devel · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-doc · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-doc · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-deprecated · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-deprecated · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-desktop · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-desktop · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra-netfilter · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra-netfilter · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-usb · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-usb · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-wireless · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-wireless · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-tools · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-tools · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-devel · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-devel · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-deprecated · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-deprecated · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-desktop · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-desktop · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra-netfilter · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra-netfilter · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-usb · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-usb · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-wireless · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-wireless · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel6.12 · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel6.12-debuginfo · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel6.12-debuginfo-common-aarch64 · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel6.12-debuginfo-common-x86_64 · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| kernel6.12-modules-extra · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| linux · Debian 12.15 (bookworm) | 6.1.147-1 | DEBIAN-CVE-2025-38071 | Jun 18, 2025 |
| linux · Debian 13.5 (trixie) | 6.12.32-1 | DEBIAN-CVE-2025-38071 | Jun 18, 2025 |
| linux · Debian 14 | 6.12.32-1 | DEBIAN-CVE-2025-38071 | Jun 18, 2025 |
| perf · amzn 2023 | 6.1.141-155.222.amzn2023 | ALAS2023-2025-1037 | Jun 18, 2025 |
| perf-debuginfo · amzn 2023 | 6.1.141-155.222.amzn2023 | ALAS2023-2025-1037 | Jun 18, 2025 |
| perf6.12 · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| perf6.12-debuginfo · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| python3-perf · amzn 2023 | 6.1.141-155.222.amzn2023 | ALAS2023-2025-1037 | Jun 18, 2025 |
| python3-perf-debuginfo · amzn 2023 | 6.1.141-155.222.amzn2023 | ALAS2023-2025-1037 | Jun 18, 2025 |
| python3-perf6.12 · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
| python3-perf6.12-debuginfo · amzn 2023 | 6.12.31-35.92.amzn2023 | ALAS2023-2025-1052 | Jul 1, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.