← CVE Intelligence

CVE-2025-39727

mm: swap: fix potential buffer overflow in setup_clusters() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setup_clusters() In setup_swap_map(), we only ensure badpages are in range (0, last_page]. As maxpages might be < last_page, setup_clusters() will encounter a buffer overflow when a badpage is >= maxpages. Only call inc_cluster_info_page() for badpage which is < maxpages to fix the issue.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected b843786b0bd01ced7fcdbf3b033d68db2f7c61b2 before 91b370800b3f2b3dda244c0ab06719c4971190a5; affected b843786b0bd01ced7fcdbf3b033d68db2f7c61b2 before 9b01ada580ee84fb319e7ecb5fb5b1f54a9eb799; affected b843786b0bd01ced7fcdbf3b033d68db2f7c61b2 before 815c528b13f2bb9b3130c13bedeabf2351a68129; affected b843786b0bd01ced7fcdbf3b033d68db2f7c61b2 before 152c1339dc13ad46f1b136e8693de15980750835
Linux / Linuxaffected 6.12; unaffected 0 before 6.12; unaffected 6.12.42 through 6.12.*; unaffected 6.15.10 through 6.15.*; unaffected 6.16.1 through 6.16.*; unaffected 6.17 through *

CWE

No CWE identifiers supplied.

References