In the Linux kernel, the following vulnerability has been resolved:
mm: swap: fix potential buffer overflow in setup_clusters()
In setup_swap_map(), we only ensure badpages are in range (0, last_page]. As maxpages might be < last_page, setup_clusters() will encounter a buffer overflow when a badpage is >= maxpages.
Only call inc_cluster_info_page() for badpage which is < maxpages to fix the issue.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpfUpgrade kernel6.12-modules-extraUpgrade perf6.12-debuginfoUpgrade bpftool6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-toolsUpgrade kernel6.12-tools-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-staticUpgrade python3-perf6.12Upgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-headersUpgrade perf6.12Upgrade kernel6.12-develUpgrade kernel6.12-debuginfo-common-x86_64 | Sep 30, 2025 | Sep 7, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2025 | Sep 7, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 27, 2026 | Sep 7, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade perfUpgrade kernel-zfcpdump-develUpgrade libperfUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade rtlaUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-s390xUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade rvUpgrade libperf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 5, 2026 | Nov 2, 2025 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-sourceUpgrade kernel-develUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade dtb-xilinx | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-6.14Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-azure-6.14Upgrade linux-image-oracleUpgrade linux-image-realtime-6.14Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-oem-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1017-oracle-64k | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub