Review reviewHigh

CVE-2025-68321

Linux

In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations Driver authors often forget to add GFP_NOWARN for page allocation from the datapath. This is annoying to users as OOMs are a fact of life, and we pretty much expect network Rx to hit page allocation failures during OOM. Make page pool add GFP_NOWARN for ATOMIC allocations by default.

CVSS: 7.5
EPSS: 0.39%
CISA KEV: Not listed
Published: 2025.12.17

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.39%

Technical severityCVSS 7.5

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= ff7d6b27f894f1469dc51ccb828b7363ccd9799f < 0ec2cd5c58793d0c622797cd5fbe26634b357210, >= ff7d6b27f894f1469dc51ccb828b7363ccd9799f < 9835a0fd59a1df5ec0740fdab6d50db68e0f10de, >= ff7d6b27f894f1469dc51ccb828b7363ccd9799f < 7613c06ffa89c1e2266fb532e23ef7dfdf269d73, >= ff7d6b27f894f1469dc51ccb828b7363ccd9799f < 3671a0775952026228ae44e096eb144bca75f8dc, >= ff7d6b27f894f1469dc51ccb828b7363ccd9799f < ab48dc0e23eb714b3f233f8e8f6deed7df2051f5, >= ff7d6b27f894f1469dc51ccb828b7363ccd9799f < f3b52167a0cb23b27414452fbc1278da2ee884fc, >= 4.18
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE: Not available