PT-2025-46756 · Linux+2 · Linux Kernel+2

Publicado

2025-09-30

·

Atualizado

2026-03-13

·

CVE-2025-40199

CVSS v2.0

6.0

Média

VetorAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel's page pool implementation. The introduction of PP MAGIC MASK led to crashes on 32-bit architectures. This occurs because the mask is set too wide, causing page pool page is pp() to incorrectly identify kernel pointers as page pool tagged pages, resulting in a system crash. The fix adjusts the definition of PP DMA INDEX BITS to prevent misidentification of kernel pointers. The solution relies on the assumption that kernel pointers aliasing with the pp magic field are located above PAGE OFFSET. If sufficient bits are unavailable, dma index storage is disabled, reverting to the pre-patch behavior on certain architecture configurations.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2025-14666
CVE-2025-40199
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1

Produtos afetados

Linuxmint
Linux Kernel
Ubuntu