Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-39727

mm: swap: fix potential buffer overflow in setup_clusters()

Description

In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setup_clusters() In setup_swap_map(), we only ensure badpages are in range (0, last_page]. As maxpages might be < last_page, setup_clusters() will encounter a buffer overflow when a badpage is >= maxpages. Only call inc_cluster_info_page() for badpage which is < maxpages to fix the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b843786b0bd01ced7fcdbf3b033d68db2f7c61b2 to < 91b370800b3f2b3dda244c0ab06719c4971190a5affected
  • b843786b0bd01ced7fcdbf3b033d68db2f7c61b2 to < 9b01ada580ee84fb319e7ecb5fb5b1f54a9eb799affected
  • b843786b0bd01ced7fcdbf3b033d68db2f7c61b2 to < 815c528b13f2bb9b3130c13bedeabf2351a68129affected
  • b843786b0bd01ced7fcdbf3b033d68db2f7c61b2 to < 152c1339dc13ad46f1b136e8693de15980750835affected

Linux Linux

Default version status: affected

  • 6.12affected
  • 0 to < 6.12unaffected
  • 6.12.42 to ≤ 6.12.*unaffected
  • 6.15.10 to ≤ 6.15.*unaffected
  • 6.16.1 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References