{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"d69cd64bd5af41c6fd409313504089970edaf02f","status":"affected","version":"54a611b605901c7d5d05b6b8f5d04a6ceb0962aa","versionType":"git"},{"lessThan":"e63032e66bca1d06e600033f3369ba3db3af0870","status":"affected","version":"54a611b605901c7d5d05b6b8f5d04a6ceb0962aa","versionType":"git"},{"lessThan":"cf95f8426f889949b738f51ffcd72884411f3a6a","status":"affected","version":"54a611b605901c7d5d05b6b8f5d04a6ceb0962aa","versionType":"git"},{"lessThan":"9e32f4700867abbd5d19abfcf698dbd0d2ce36a4","status":"affected","version":"54a611b605901c7d5d05b6b8f5d04a6ceb0962aa","versionType":"git"},{"lessThan":"fba46a5d83ca8decb338722fb4899026d8d9ead2","status":"affected","version":"54a611b605901c7d5d05b6b8f5d04a6ceb0962aa","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.1"},{"lessThan":"6.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.146","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.99","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.36","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]}],"cveId":"CVE-2025-38364","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmaple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()\n\nTemporarily clear the preallocation flag when explicitly requesting\nallocations.  Pre-existing allocations are already counted against the\nrequest through mas_node_count_gfp(), but the allocations will not happen\nif the MA_STATE_PREALLOC flag is set.  This flag is meant to avoid\nre-allocating in bulk allocation mode, and to detect issues with\npreallocation calculations.\n\nThe MA_STATE_PREALLOC flag should also always be set on zero allocations\nso that detection of underflow allocations will print a WARN_ON() during\nconsumption.\n\nUser visible effect of this flaw is a WARN_ON() followed by a null pointer\ndereference when subsequent requests for larger number of nodes is\nignored, such as the vma merge retry in mmap_region() caused by drivers\naltering the vma flags (which happens in v6.6, at least)","epss":{"date":"2026-11-05","percentile":0.08656,"score":0.00189},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793912555642,"publishedAt":1753447654548,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d69cd64bd5af41c6fd409313504089970edaf02f"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/e63032e66bca1d06e600033f3369ba3db3af0870"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/cf95f8426f889949b738f51ffcd72884411f3a6a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/9e32f4700867abbd5d19abfcf698dbd0d2ce36a4"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/fba46a5d83ca8decb338722fb4899026d8d9ead2"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"remediation":[],"revision":"29ad56a48bc381307594507ee9263d9a652c759cb87b0d50fc7e18dac4687d13","sources":[{"modifiedAt":1793912555642,"name":"CNA: Linux","retrievedAt":1793913677276,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38364"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913706402,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38364"}],"ssvc":{"assessedAt":1793912134394,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()","updatedAt":1793913706402}