---
id: CVE-2025-38195
title: 'LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()

  ERROR INFO:

  CPU 25 Unable to handle kernel paging request at virtual address 0x0
           ...
   Call Trace…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 34256805720993e37adf6127371a1265aea8376a <
    55a9a7d21309bbea1dd629cf28396521a2803bb3
  - >-
    Linux >= 2ca9380b12711afe95b3589bd82b59623b3c96b3 <
    b427d98d55217b53c88643579fbbd8a4c351a105
  - >-
    Linux >= 51424fd171cee6a33f01f7c66b8eb23ac42289d4 <
    985f086f281b7bbb6644851e63af1a17ffff9277
  - >-
    Linux >= bd51834d1cf65a2c801295d230c220aeebf87a73 <
    b5c7397b7fd125203c60b59860c168ee92291272
  - >-
    Linux >= bd51834d1cf65a2c801295d230c220aeebf87a73 <
    ee084fa96123ede8b0563a1b5a9b23adc43cd50d
  - Linux b49f085cd671addbda4802d6b9382513f7dd0f30
  - Linux >= 6.1.136 < 6.1.191
  - Linux >= 6.6.89 < 6.6.95
  - Linux >= 6.12.26 < 6.12.35
  - Linux >= 6.14.5 < 6.15
  - Linux 6.15
published: '2025-07-04'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:21:45.698Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38195'
references:
  - url: 'https://git.kernel.org/stable/c/55a9a7d21309bbea1dd629cf28396521a2803bb3'
  - url: 'https://git.kernel.org/stable/c/b427d98d55217b53c88643579fbbd8a4c351a105'
  - url: 'https://git.kernel.org/stable/c/985f086f281b7bbb6644851e63af1a17ffff9277'
  - url: 'https://git.kernel.org/stable/c/b5c7397b7fd125203c60b59860c168ee92291272'
  - url: 'https://git.kernel.org/stable/c/ee084fa96123ede8b0563a1b5a9b23adc43cd50d'
tags:
  - cve.org
epss: 0.00182
epssPercentile: 0.07825
ingestedAt: '2026-11-03T18:52:04.082Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()

ERROR INFO:

CPU 25 Unable to handle kernel paging request at virtual address 0x0
         ...
 Call Trace:
 [<900000000023c30c>] huge_pte_offset+0x3c/0x58
 [<900000000057fd4c>] hugetlb_follow_page_mask+0x74/0x438
 [<900000000051fee8>] __get_user_pages+0xe0/0x4c8
 [<9000000000522414>] faultin_page_range+0x84/0x380
 [<9000000000564e8c>] madvise_vma_behavior+0x534/0xa48
 [<900000000056689c>] do_madvise+0x1bc/0x3e8
 [<9000000000566df4>] sys_madvise+0x24/0x38
 [<90000000015b9e88>] do_syscall+0x78/0x98
 [<9000000000221f18>] handle_syscall+0xb8/0x158

In some cases, pmd may be NULL and rely on NULL as the return value for
processing, so it is necessary to determine this situation here.

## Affected

- `Linux >= 34256805720993e37adf6127371a1265aea8376a < 55a9a7d21309bbea1dd629cf28396521a2803bb3`
- `Linux >= 2ca9380b12711afe95b3589bd82b59623b3c96b3 < b427d98d55217b53c88643579fbbd8a4c351a105`
- `Linux >= 51424fd171cee6a33f01f7c66b8eb23ac42289d4 < 985f086f281b7bbb6644851e63af1a17ffff9277`
- `Linux >= bd51834d1cf65a2c801295d230c220aeebf87a73 < b5c7397b7fd125203c60b59860c168ee92291272`
- `Linux >= bd51834d1cf65a2c801295d230c220aeebf87a73 < ee084fa96123ede8b0563a1b5a9b23adc43cd50d`
- `Linux b49f085cd671addbda4802d6b9382513f7dd0f30`
- `Linux >= 6.1.136 < 6.1.191`
- `Linux >= 6.6.89 < 6.6.95`
- `Linux >= 6.12.26 < 6.12.35`
- `Linux >= 6.14.5 < 6.15`
- `Linux 6.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.