CVE-2025-68321page_pool: always add GFP_NOWARN for ATOMIC allocations
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations Driver authors often forget to add GFP_NOWARN for page allocation from the datapath. This is annoying to users as OOMs are a fact of life, and we pretty much expect network Rx to hit page allocation failures during OOM. Make page pool add GFP_NOWARN for ATOMIC allocations by default.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from ff7d6b27f894f1469dc51ccb828b7363ccd9799f before 0ec2cd5c58793d0c622797cd5fbe26634b357210; from ff7d6b27f894f1469dc51ccb828b7363ccd9799f before 9835a0fd59a1df5ec0740fdab6d50db68e0f10de; from ff7d6b27f894f1469dc51ccb828b7363ccd9799f before 7613c06ffa89c1e2266fb532e23ef7dfdf269d73; from ff7d6b27f894f1469dc51ccb828b7363ccd9799f before 3671a0775952026228ae44e096eb144bca75f8dc; from ff7d6b27f894f1469dc51ccb828b7363ccd9799f before ab48dc0e23eb714b3f233f8e8f6deed7df2051f5; from ff7d6b27f894f1469dc51ccb828b7363ccd9799f before f3b52167a0cb23b27414452fbc1278da2ee884fc | CNA record |
References
- https://git.kernel.org/stable/c/0ec2cd5c58793d0c622797cd5fbe26634b357210
- https://git.kernel.org/stable/c/9835a0fd59a1df5ec0740fdab6d50db68e0f10de
- https://git.kernel.org/stable/c/7613c06ffa89c1e2266fb532e23ef7dfdf269d73
- https://git.kernel.org/stable/c/3671a0775952026228ae44e096eb144bca75f8dc
- https://git.kernel.org/stable/c/ab48dc0e23eb714b3f233f8e8f6deed7df2051f5
- https://git.kernel.org/stable/c/f3b52167a0cb23b27414452fbc1278da2ee884fc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.