CVE-2025-21815

Summary

In the Linux kernel, the following vulnerability has been resolved:

mm/compaction: fix UBSAN shift-out-of-bounds warning

syzkaller reported a UBSAN shift-out-of-bounds warning of (1UL << order) in isolate_freepages_block(). The bogus compound_order can be any value because it is union with flags. Add back the MAX_PAGE_ORDER check to fix the warning.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux3da0272a4c7d0d37b47b28e87014f421296fc2be < 4491159774d973a9e2e998d25d8fbb20fada6dfaaffected
LinuxLinux3da0272a4c7d0d37b47b28e87014f421296fc2be < 10b7d3eb535098ccd4c82a182a33655d8a0e5c88affected
LinuxLinux3da0272a4c7d0d37b47b28e87014f421296fc2be < d1366e74342e75555af2648a2964deb2d5c92200affected
LinuxLinux6.7affected
LinuxLinux0 < 6.7unaffected
LinuxLinux6.12.14 <= 6.12.*unaffected
LinuxLinux6.13.3 <= 6.13.*unaffected
LinuxLinux6.14 <= *unaffected

Weaknesses

References