PT-2025-46756 · Linux+2 · Linux Kernel+2

Published

2025-09-30

·

Updated

2026-03-13

·

CVE-2025-40199

CVSS v2.0

6.0

Medium

VectorAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel's page pool implementation. The introduction of PP MAGIC MASK led to crashes on 32-bit architectures. This occurs because the mask is set too wide, causing page pool page is pp() to incorrectly identify kernel pointers as page pool tagged pages, resulting in a system crash. The fix adjusts the definition of PP DMA INDEX BITS to prevent misidentification of kernel pointers. The solution relies on the assumption that kernel pointers aliasing with the pp magic field are located above PAGE OFFSET. If sufficient bits are unavailable, dma index storage is disabled, reverting to the pre-patch behavior on certain architecture configurations.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-14666
CVE-2025-40199
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu