PT-2025-46756 · Linux+2 · Linux Kernel+2
Published
2025-09-30
·
Updated
2026-03-13
·
CVE-2025-40199
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel's page pool implementation. The introduction of
PP MAGIC MASK led to crashes on 32-bit architectures. This occurs because the mask is set too wide, causing page pool page is pp() to incorrectly identify kernel pointers as page pool tagged pages, resulting in a system crash. The fix adjusts the definition of PP DMA INDEX BITS to prevent misidentification of kernel pointers. The solution relies on the assumption that kernel pointers aliasing with the pp magic field are located above PAGE OFFSET. If sufficient bits are unavailable, dma index storage is disabled, reverting to the pre-patch behavior on certain architecture configurations.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu