SECUFOCUSNOW
Home›CVE index›CVE-2025-40245
Review reviewHigh

CVE-2025-40245

Linux

In the Linux kernel, the following vulnerability has been resolved: nios2: ensure that memblock.current_limit is set when setting pfn limits On nios2, with CONFIG_FLATMEM set, the kernel relies on memblock_get_current_limit() to determine the limits of mem_map, in particular for max_low_pfn. Unfortunately, memblock.current_limit is only default initialized to MEMBLOCK_ALLOC_ANYWHERE at this point of the bootup, potentially leading to situations where max_low_pfn can erroneously exceed the value of max_pfn and, thus, the valid range of available DRAM. This can in turn cause kernel-level pagi...

CVSS
7.8
EPSS
0.15%
4.79% percentile
CISA KEV
Not listed
Published
2025.12.05
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.15%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: nios2: ensure that memblock.current_limit is set when setting pfn limits On nios2, with CONFIG_FLATMEM set, the kernel relies on memblock_get_current_limit() to determine the limits of mem_map, in particular for max_low_pfn. Unfortunately, memblock.current_limit is only default initialized to MEMBLOCK_ALLOC_ANYWHERE at this point of the bootup, potentially leading to situations where max_low_pfn can erroneously exceed the value of max_pfn and, thus, the valid range of available DRAM. This can in turn cause kernel-level pagi...

Affected product and versions

Product
Linux
Affected versions
>= 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae < 25f09699edd360b534ccae16bc276c3b52c471f3, >= 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae < 5c3e38a367822f036227dd52bac82dc4a05157e2, >= 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae < b1ec9faef7e36269ca3ec890972a78effbaeb975, >= 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae < 90f5f715550e07cd6a51f80fc3f062d832c8c997, >= 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae < 8912814f14e298b83df072fecc1f7ed1b63b1b2c, >= 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae < a20b83cf45be2057f3d073506779e52c7fa17f94, >= 5.12
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available
CVE-2025-40245 — Linux | SECUFOCUS NOW