mm: hugetlb: avoid soft lockup when mprotect to large memory area

{
  "id": "ee4c4012eacce9b2db990dbfd278c2d8beb173750243d22521272fe4bbd8b43d",
  "url": "https://osv.dev/vulnerability/CVE-2025-40153",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "mm: hugetlb: avoid soft lockup when mprotect to large memory area",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect() to a large hugetlb memory area in our customer's workload (~300GB hugetlb memory), soft lockup was observed: watchdog: BUG: soft lockup - CPU#98 stuck for 23s! [t2_new_sysv:126916] CPU: 98 PID: 126916 Comm: t2_new_sysv Kdump: loaded Not tainted 6.17-rc7 Hardware name: GIGACOMPUTING R2A3-T40-AAV1/Jefferson CIO, BIOS 5.4.4.1 07/15/2025 pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : mte_clear_page_tags+0x14/0x24 lr : mte_sync_tags+0x1c0/0x240 sp : ffff80003150bb80 x29: ffff80003150bb80 x28: ffff00739e9705a8 x27: 0000ffd2d6a00000 x26: 0000ff8e4bc00000 x25: 00e80046cde00f45 x24: 0000000000022458 x23: 0000000000000000 x22: 0000000000000004 x21: 000000011b380000 x20: ffff000000000000 x19: 000000011b379f40 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : ffffc875e0aa5e2c x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : fffffc01ce7a5c00 x4 : 00000000046cde00 x3 : fffffc0000000000 x2 : 0000000000000004 x1 : 0000000000000040 x0 : ffff0046cde7c000 Call trace: mte_clear_page_tags+0x14/0x24 set_huge_pte_at+0x25c/0x280 hugetlb_change_protection+0x220/0x430 change_protection+0x5c/0x8c mprotect_fixup+0x10c/0x294 do_mprotect_pkey.constprop.0+0x",
    "evidence": "osv:CVE-2025-40153",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.301",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.10.246",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.195",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.1.156",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.112",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.53",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.17.3",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2025-40153",
      "aliases": [
        "CVE-2025-40153"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "8f860591ffb29738cf5539b6fbf27f50dcdeb380"
                },
                {
                  "fixed": "30498c44c2a0b20f6833ed7d8fc3df901507f760"
                },
                {
                  "fixed": "5783485ab2be06be5312b26c8793526edc09123d"
                },
                {
                  "fixed": "547e123e9d342a44c756446640ed847a8aeec611"
                },
                {
                  "fixed": "957faf9582f92bb2be8ebe4ab6aa1c2bc71d9859"
                },
                {
                  "fixed": "964598e6f70a1be9fe675280bf16b4f96b0a6809"
                },
                {
                  "fixed": "4975c975ed9457a77953a26aeef85fdba7cf5498"
                },
                {
                  "fixed": "c6096f3947f68f96defedb8764b3b1ca4cf3469f"
                },
                {
                  "fixed": "f52ce0ea90c83a28904c7cc203a70e6434adfecb"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40153.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "2.6.17"
                },
                {
                  "fixed": "5.4.301"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.5.0"
                },
                {
                  "fixed": "5.10.246"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "5.15.195"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "6.1.156"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.112"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.12.53"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.17.3"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40153.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:45.834023611Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/30498c44c2a0b20f6833ed7d8fc3df901507f760",
        "https://git.kernel.org/stable/c/4975c975ed9457a77953a26aeef85fdba7cf5498",
        "https://git.kernel.org/stable/c/547e123e9d342a44c756446640ed847a8aeec611",
        "https://git.kernel.org/stable/c/5783485ab2be06be5312b26c8793526edc09123d",
        "https://git.kernel.org/stable/c/957faf9582f92bb2be8ebe4ab6aa1c2bc71d9859",
        "https://git.kernel.org/stable/c/964598e6f70a1be9fe675280bf16b4f96b0a6809",
        "https://git.kernel.org/stable/c/c6096f3947f68f96defedb8764b3b1ca4cf3469f",
        "https://git.kernel.org/stable/c/f52ce0ea90c83a28904c7cc203a70e6434adfecb",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40153.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-40153",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40153.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-40153",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 513952,
  "published_at": "2025-11-12T10:23:28.201+00:00"
}