CVE-2025-21815

HIGH

Linux kernel - Use After Free

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: fix UBSAN shift-out-of-bounds warning syzkaller reported a UBSAN shift-out-of-bounds warning of (1UL << order) in isolate_freepages_block(). The bogus compound_order can be any value because it is union with flags. Add back the MAX_PAGE_ORDER check to fix the warning.

Scores

CVSS v3 7.1
EPSS 0.0002
EPSS Percentile 5.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Details

CWE
CWE-125
Status published
Products (3)
linux/Kernel 6.13.0 - 6.13.3linux
linux/Kernel 6.7.0 - 6.12.14linux
linux/linux_kernel 6.7 - 6.12.14
Published Feb 27, 2025
Tracked Since Feb 18, 2026