https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 01:37:05 +0000 https://vulnerability.circl.lu/vuln/cve-2025-39836 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>efi: stmm: Fix incorrect buffer allocation method</p> <p>The communication buffer allocated by setup_mm_hdr() is later on passed to tee_shm_register_kernel_buf(). The latter expects those buffers to be contiguous pages, but setup_mm_hdr() just uses kmalloc(). That can cause various corruptions or BUGs, specifically since commit 9aec2fb0fd5e (&#34;slab: allocate frozen pages&#34;), though it was broken before as well.</p> <p>Fix this by using alloc_pages_exact() instead of kmalloc().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>efi: stmm: Fix incorrect buffer allocation method</p> <p>The communication buffer allocated by setup_mm_hdr() is later on passed to tee_shm_register_kernel_buf(). The latter expects those buffers to be contiguous pages, but setup_mm_hdr() just uses kmalloc(). That can cause various corruptions or BUGs, specifically since commit 9aec2fb0fd5e (&#34;slab: allocate frozen pages&#34;), though it was broken before as well.</p> <p>Fix this by using alloc_pages_exact() instead of kmalloc().</p> https://vulnerability.circl.lu/vuln/cve-2025-39836