Buffer Overflow Vulnerability in Linux Kernel Affecting Memory Management

CVE-2025-39727

What is CVE-2025-39727?

A vulnerability in the Linux kernel's memory management system may lead to a buffer overflow in setup_clusters(). This issue arises due to an insufficient check for badpage values, which may cause the application to attempt to access memory outside a designated range. Specifically, if a badpage value equals or exceeds the maximum allowable pages, a buffer overflow can occur, potentially resulting in system crashes or unpredictable behavior. This vulnerability has been addressed by restricting calls to inc_cluster_info_page() only for badpages that are less than the maxpages limit.

References