---
id: CVE-2025-68737
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  arm64/pageattr: Propagate return value from __change_memory_common

  The rodata=on security measure requires that any code path which does
  vmalloc -> set_memory_ro/set_m…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  arm64/pageattr: Propagate return value from __change_memory_common

  The rodata=on security measure requires that any code path which does
  vmalloc -> set_memory_ro/set_m…
severity: none
published: '2025-12-24'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T10:10:00.193'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68737'
references:
  - url: 'https://git.kernel.org/stable/c/3e2fc1e57a5361633a4bf4222640c6bfe41ff8ea'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e5efd56fa157d2e7d789949d1d64eccbac18a897'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00174
epssPercentile: 0.0625
ingestedAt: '2026-10-13T10:22:03.516Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

arm64/pageattr: Propagate return value from __change_memory_common

The rodata=on security measure requires that any code path which does
vmalloc -> set_memory_ro/set_memory_rox must protect the linear map alias
too. Therefore, if such a call fails, we must abort set_memory_* and caller
must take appropriate action; currently we are suppressing the error, and
there is a real chance of such an error arising post commit a166563e7ec3
("arm64: mm: support large block mapping when rodata=full"). Therefore,
propagate any error to the caller.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.