CVE-2025-39836

In the Linux kernel, the following vulnerability has been resolved: efi: stmm: Fix incorrect buffer allocation method The communication buffer allocated by setup_mm_hdr() is later on passed to tee_shm_register_kernel_buf(). The latter expects those buffers to be contiguous pages, but setup_mm_hdr() just uses kmalloc(). That can cause various corruptions or BUGs, specifically since commit 9aec2fb0fd5e ("slab: allocate frozen pages"), though it was broken before as well. Fix this by using alloc_pages_exact() instead of kmalloc().

• CWE-787
• CWE-787

• https://git.kernel.org/stable/c/630c0e6064daf84f17aad1a7d9ca76b562e3fe47Patch
• https://git.kernel.org/stable/c/77ff27ff0e4529a003c8a1c2492c111968c378d3Patch
• https://git.kernel.org/stable/c/c5e81e672699e0c5557b2b755cc8f7a69aa92bffPatch

Published

Sep 16, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-39830In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39831In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39832In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39833In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39834In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39835In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-39837In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-39838In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39839In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-3984A vulnerability was found in Apereo CAS 5.2.6 and classified…7.5
• CVE-2025-39840In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-39841In the Linux kernel, the following vulnerability has been re…7.8