CVE-2025-68293

CVE-2025-68293 is a NULL pointer dereference vulnerability in the Linux kernel's huge memory management, specifically affecting shmem folios in the swap cache and truncated folios. The flaw arises from an early check on folio order that accesses a potentially NULL mapping pointer, leading to a system crash. While no specific products are listed, it impacts Linux kernel versions incorporating the problematic commit. The severity is moderate, as it requires specific memory conditions to trigger the NULL pointer dereference, likely resulting in a denial-of-service. The attack vector is internal to the kernel's memory management, suggesting a local attacker or a highly privileged process would be required to exploit it. The FAUCET Risk Score is 7/100, indicating a relatively low overall risk. Currently, there is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, which is typical for a significant portion of CVEs. The vulnerability is considered inactive on the Hot List.