PT-2025-51569 · Linux+3 · Linux Kernel+3
Published
2025-10-23
·
Updated
2026-05-07
·
CVE-2025-40353
CVSS v2.0
4.9
Medium
| Vector | AV:N/AC:H/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue within the arm64 architecture’s memory tagging extension (MTE) implementation. Specifically, the
copy highpage() function incorrectly issues a warning when a destination page is already tagged, which can occur during folio migration operations following a specific commit. The copy highpage() function assumes the destination page is newly allocated and not MTE-tagged, but subsequent operations can lead to the same page being copied again, triggering an unnecessary warning. The issue arises from the interaction between folio mc copy() and folio migrate mapping(), where a failed migration attempt can result in a second copy operation to the same destination page. The warning is generated because the PG mte tagged flag is already set on the destination page from the first copy attempt. The fix involves replacing the warning message with a comment.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Resource Exhaustion
Allocation of Resources Without Limits
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu