kernel: mm: swap: fix potential buffer overflow in setup_clusters()

A flaw was found in the Linux kernel's memory management mm swap component. A local attacker with low privileges could exploit a buffer overflow vulnerability in the setupclusters function. This issue arises from insufficient validation of page ranges, which could allow an attacker to write data...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm:swap: A potential buffer overflow was fixed in setupclusters. In setupswapmap, we ensure that badpages are within the range 0, lastpage. Since maxpages might be less than lastpage, setupclusters may encounter a buffer overflow...

kernel: mm: swap: fix potential buffer overflow in setup_clusters()

A flaw was found in the Linux kernel's memory management mm swap component. A local attacker with low privileges could exploit a buffer overflow vulnerability in the setupclusters function. This issue arises from insufficient validation of page ranges, which could allow an attacker to write data...

SUSE CVE-2025-39727

In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setupclusters In setupswapmap, we only ensure badpages are in range 0, lastpage. As maxpages might be = maxpages. Only call incclusterinfopage for badpage which is maxpages to fix the...

DEBIAN-CVE-2025-39727

In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setupclusters In setupswapmap, we only ensure badpages are in range 0, lastpage. As maxpages might be = maxpages. Only call incclusterinfopage for badpage which is maxpages to fix the...

CVE-2025-39727

In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setupclusters In setupswapmap, we only ensure badpages are in range 0, lastpage. As maxpages might be = maxpages. Only call incclusterinfopage for badpage which is maxpages to fix the...

CVE-2025-39727

The CVE-2025-39727 entry concerns a Linux kernel vulnerability in memory management swap code. The issue is a potential buffer overflow in setup_clusters() triggered when setup_swap_map() validates badpages only up to (0, last_page], and maxpages may be less than last_page, causing setup_clusters...

CVE-2025-39727 mm: swap: fix potential buffer overflow in setup_clusters()

In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setupclusters In setupswapmap, we only ensure badpages are in range 0, lastpage. As maxpages might be = maxpages. Only call incclusterinfopage for badpage which is maxpages to fix the...

CVE-2025-39727 mm: swap: fix potential buffer overflow in setup_clusters()

In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setupclusters In setupswapmap, we only ensure badpages are in range 0, lastpage. As maxpages might be = maxpages. Only call incclusterinfopage for badpage which is maxpages to fix the...

PT-2025-36409

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue exists in the setup clusters function within the kernel's swap management code. The vulnerability occurs because setup swap map only validates badpages against th...