Riskcovery

CVE-2025-40353

arm64: mte: Do not warn if the page is already tagged in copy_highpage()

State
Published
Severity
Not scored
Published
Dec 16, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64: mte: Do not warn if the page is already tagged in copy_highpage()

The arm64 copy_highpage() assumes that the destination page is newly allocated and not MTE-tagged (PG_mte_tagged unset) and warns accordingly. However, following commit 060913999d7a ("mm: migrate: support poisoned recover from migrate folio"), folio_mc_copy() is called before __folio_migrate_mapping(). If the latter fails (-EAGAIN), the copy will be done again to the same destination page. Since copy_highpage() already set the PG_mte_tagged flag, this second copy will warn.

Replace the WARN_ON_ONCE(page already tagged) in the arm64 copy_highpage() with a comment.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 060913999d7a9e50c283fdb15253fc27974ddadc to before 5ff5765a1fc526f07d3bbaedb061d970eb13bcf4Affected
  • 060913999d7a9e50c283fdb15253fc27974ddadc to before 0bbf3fc6e9211fce9889fe8efbb89c220504d617Affected
  • 060913999d7a9e50c283fdb15253fc27974ddadc to before b98c94eed4a975e0c80b7e90a649a46967376f58Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.56 through 6.12.*Not affected
  • 6.17.6 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.