Answer in brief
CVE-2025-39836 records a High severity (CVSS 7.8) vulnerability in efi: stmm: Fix incorrect buffer allocation method. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 6.8 | Not reported |
| Linux/Linuxgeneric | >=c44b6be62e8dd4ee0a308c36a70620613e6fc55f <77ff27ff0e4529a003c8a1c2492c111968c378d3 || >=c44b6be62e8dd4ee0a308c36a70620613e6fc55f <630c0e6064daf84f17aad1a7d9ca76b562e3fe47 || >=c44b6be62e8dd4ee0a308c36a70620613e6fc55f <c5e81e672699e0c5557b2b755cc8f7a69aa92bff | 77ff27ff0e4529a003c8a1c2492c111968c378d3, 630c0e6064daf84f17aad1a7d9ca76b562e3fe47, c5e81e672699e0c5557b2b755cc8f7a69aa92bff |
Published upstream
Sep 16, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: efi: stmm: Fix incorrect buffer allocation method The communication buffer allocated by setup_mm_hdr() is later on passed to tee_shm_register_kernel_buf(). The latter expects those buffers to be contiguous pages, but setup_mm_hdr() just uses kmalloc(). That can cause various corruptions or BUGs, specifically since commit 9aec2fb0fd5e ("slab: allocate frozen pages"), though it was broken before as well. Fix this by using alloc_pages_exact() instead of kmalloc().
Quoted source text, attributed separately from HOL analysis.