github - ghsa-37p3-cfcq-p2hp

ghsa-37p3-cfcq-p2hp

Vulnerability from github

Published

2025-02-27 21:32

Modified

2025-02-27 21:32

Details

In the Linux kernel, the following vulnerability has been resolved:

mm/compaction: fix UBSAN shift-out-of-bounds warning

syzkaller reported a UBSAN shift-out-of-bounds warning of (1UL << order) in isolate_freepages_block(). The bogus compound_order can be any value because it is union with flags. Add back the MAX_PAGE_ORDER check to fix the warning.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-21815"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-02-27T20:16:04Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/compaction: fix UBSAN shift-out-of-bounds warning\n\nsyzkaller reported a UBSAN shift-out-of-bounds warning of (1UL \u003c\u003c order)\nin isolate_freepages_block().  The bogus compound_order can be any value\nbecause it is union with flags.  Add back the MAX_PAGE_ORDER check to fix\nthe warning.",
  "id": "GHSA-37p3-cfcq-p2hp",
  "modified": "2025-02-27T21:32:17Z",
  "published": "2025-02-27T21:32:17Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21815"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/10b7d3eb535098ccd4c82a182a33655d8a0e5c88"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4491159774d973a9e2e998d25d8fbb20fada6dfa"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d1366e74342e75555af2648a2964deb2d5c92200"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2025-21815 (GCVE-0-2025-21815)

Vulnerability from cvelistv5

Published

2025-02-27 20:04

Modified

2025-05-04 07:21

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: fix UBSAN shift-out-of-bounds warning syzkaller reported a UBSAN shift-out-of-bounds warning of (1UL << order) in isolate_freepages_block(). The bogus compound_order can be any value because it is union with flags. Add back the MAX_PAGE_ORDER check to fix the warning.

References

►

URL

Tags

	https://git.kernel.org/stable/c/4491159774d973a9e2e998d25d8fbb20fada6dfa
	https://git.kernel.org/stable/c/10b7d3eb535098ccd4c82a182a33655d8a0e5c88
	https://git.kernel.org/stable/c/d1366e74342e75555af2648a2964deb2d5c92200

Impacted products

Vendor

Product

Version

►

Version: 3da0272a4c7d0d37b47b28e87014f421296fc2be
Version: 3da0272a4c7d0d37b47b28e87014f421296fc2be
Version: 3da0272a4c7d0d37b47b28e87014f421296fc2be

Version: 6.7

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "mm/compaction.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4491159774d973a9e2e998d25d8fbb20fada6dfa",
              "status": "affected",
              "version": "3da0272a4c7d0d37b47b28e87014f421296fc2be",
              "versionType": "git"
            },
            {
              "lessThan": "10b7d3eb535098ccd4c82a182a33655d8a0e5c88",
              "status": "affected",
              "version": "3da0272a4c7d0d37b47b28e87014f421296fc2be",
              "versionType": "git"
            },
            {
              "lessThan": "d1366e74342e75555af2648a2964deb2d5c92200",
              "status": "affected",
              "version": "3da0272a4c7d0d37b47b28e87014f421296fc2be",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "mm/compaction.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.7"
            },
            {
              "lessThan": "6.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.13.*",
              "status": "unaffected",
              "version": "6.13.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.14",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.14",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13.3",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/compaction: fix UBSAN shift-out-of-bounds warning\n\nsyzkaller reported a UBSAN shift-out-of-bounds warning of (1UL \u003c\u003c order)\nin isolate_freepages_block().  The bogus compound_order can be any value\nbecause it is union with flags.  Add back the MAX_PAGE_ORDER check to fix\nthe warning."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T07:21:46.285Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4491159774d973a9e2e998d25d8fbb20fada6dfa"
        },
        {
          "url": "https://git.kernel.org/stable/c/10b7d3eb535098ccd4c82a182a33655d8a0e5c88"
        },
        {
          "url": "https://git.kernel.org/stable/c/d1366e74342e75555af2648a2964deb2d5c92200"
        }
      ],
      "title": "mm/compaction: fix UBSAN shift-out-of-bounds warning",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-21815",
    "datePublished": "2025-02-27T20:04:14.733Z",
    "dateReserved": "2024-12-29T08:45:45.774Z",
    "dateUpdated": "2025-05-04T07:21:46.285Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.