Answer in brief
CVE-2025-38071 records a Unknown severity vulnerability in x86/mm: Check return value from memblock_phys_alloc_range(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=a7259df7670240ee03b0cfce8a3e5d3773911e24 <8c18c904d301ffeb33b071eadc55cd6131e1e9be || >=a7259df7670240ee03b0cfce8a3e5d3773911e24 <bffd5f2815c5234d609725cd0dc2f4bc5de2fc67 || >=a7259df7670240ee03b0cfce8a3e5d3773911e24 <c6f2694c580c27dca0cf7546ee9b4bfa6b940e38 || >=a7259df7670240ee03b0cfce8a3e5d3773911e24 <dde4800d2b0f68b945fd81d4fc2d4a10ae25f743 || >=a7259df7670240ee03b0cfce8a3e5d3773911e24 <631ca8909fd5c62b9fda9edda93924311a78a9c4 | 8c18c904d301ffeb33b071eadc55cd6131e1e9be, bffd5f2815c5234d609725cd0dc2f4bc5de2fc67, c6f2694c580c27dca0cf7546ee9b4bfa6b940e38, dde4800d2b0f68b945fd81d4fc2d4a10ae25f743, 631ca8909fd5c62b9fda9edda93924311a78a9c4 |
| Linux/Linuxgeneric | 5.15 | Not reported |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
Published upstream
Jun 18, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Jul 14, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 6, 2026
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Check return value from memblock_phys_alloc_range() At least with CONFIG_PHYSICAL_START=0x100000, if there is < 4 MiB of contiguous free memory available at this point, the kernel will crash and burn because memblock_phys_alloc_range() returns 0 on failure, which leads memblock_phys_free() to throw the first 4 MiB of physical memory to the wolves. At a minimum it should fail gracefully with a meaningful diagnostic, but in fact everything seems to work fine without the weird reserve allocation.
Quoted source text, attributed separately from HOL analysis.