Linux Kernel Arm64 Memory Tagging Extension Copy Highpage Warning Bypass Vulnerability

Vulnerability

A vulnerability in the Linux kernel's handling of memory tagging extensions (MTE) on arm64 architecture has been addressed. The issue arose in the 'copy_highpage()' function, which incorrectly assumed that the destination page was newly allocated and not MTE-tagged. This assumption led to unnecessary warnings when the page was reused during the migration process. The vulnerability has been resolved by modifying the warning mechanism to prevent false alerts without compromising the integrity of the page copying process.

Impact

The vulnerability could lead to improper handling of memory pages, potentially causing issues in memory management and data integrity during page migrations.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree to address this vulnerability.

Added: Dec 16, 2025, 5:27 PM
Updated: Dec 16, 2025, 5:27 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.0
remediation
0.0
relevance
1.6
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.