CVE-2025-39902

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mm/slub: avoid accessing metadata when pointer is invalid in object_err()<br /> <br /> object_err() reports details of an object for further debugging, such as<br /> the freelist pointer, redzone, etc. However, if the pointer is invalid,<br /> attempting to access object metadata can lead to a crash since it does<br /> not point to a valid object.<br /> <br /> One known path to the crash is when alloc_consistency_checks()<br /> determines the pointer to the allocated object is invalid because of a<br /> freelist corruption, and calls object_err() to report it. The debug code<br /> should report and handle the corruption gracefully and not crash in the<br /> process.<br /> <br /> In case the pointer is NULL or check_valid_pointer() returns false for<br /> the pointer, only print the pointer value and skip accessing metadata.