-

CVE-2025-38258

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write

memcg_path_store() assigns a newly allocated memory buffer to
filter->memcg_path, without deallocating the previously allocated and
assigned memory buffer.  As a result, users can leak kernel memory by
continuously writing a data to memcg_path DAMOS sysfs file.  Fix the leak
by deallocating the previously set memory buffer.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
≫
Product Linux
Default Statusunaffected
Version < 490a43d07f1663d827e802720d30cbc0494e4f81
Version 7ee161f18b5da5170b5d6a51aace49d312099128
Status affected
Version < c5d5b0047b0c0f304608f3824139f7bd34c48413
Version 7ee161f18b5da5170b5d6a51aace49d312099128
Status affected
Version < 4a158ac0538dd5695eeaa00aa0720d711f3e4ef1
Version 7ee161f18b5da5170b5d6a51aace49d312099128
Status affected
Version < 4f489fe6afb395dbc79840efa3c05440b760d883
Version 7ee161f18b5da5170b5d6a51aace49d312099128
Status affected
VendorLinux
≫
Product Linux
Default Statusaffected
Version 6.3
Status affected
Version < 6.3
Version 0
Status unaffected
Version <= 6.6.*
Version 6.6.96
Status unaffected
Version <= 6.12.*
Version 6.12.36
Status unaffected
Version <= 6.15.*
Version 6.15.5
Status unaffected
Version <= *
Version 6.16
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.057
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string