Search/CVE-2025-71134
● CVE — Medium

CVE-2025-71134

VendorlinuxProductlinux kernelDiscoveredJan 14, 2026UpdatedMar 25, 2026

In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: change all pageblocks migrate type on coalescing When a page is freed it coalesces with a buddy into a higher order page while possible. When the buddy page migrate type differs, it is expected to be updated to match the one of the page being freed. However, only the first pageblock of the buddy page is updated, while the rest of the pageblocks are left unchanged. That causes warnings in later expand() and other code paths (like below), since an inconsistency between migration type of the list containing the page and the page-owned pageblocks migration types is introduced. [ 308.986589] ------------[ cut here ]------------ [ 308.987227] page type is 0, passed migratetype is 1 (nr=256) [ 308.987275] WARNING:…

CVSS v3.1
5.5 MEDIUM
EPSS
0.14%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
5
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.02pp
0.12% → 0.14% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Connections
6 relationships
Timeline
disclosure → media coverage
Jan 14, 2026
Disclosure — published as a CVE record. · last revised by NVD Mar 25, 2026
May 19, 2026
ubuntu.com reports: USN-8277-1: Linux kernel vulnerabilities
May 22, 2026
ubuntu.com reports: USN-8277-2: Linux kernel (Oracle) vulnerabilities
May 26, 2026
ubuntu.com reports: USN-8310-1: Linux kernel (Azure) vulnerabilities
Jun 2, 2026
ubuntu.com reports: USN-8374-1: Linux kernel vulnerabilities
Jul 6, 2026
ubuntu.com reports: USN-8508-1: Linux kernel (NVIDIA) vulnerabilities