PT-2025-30805 · Linux+4 · Linux Kernel+4

CVE-2025-38405

·

Published

2025-06-25

·

Updated

2026-08-19

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a memory leak in the nvmet subsystem related to bio integrity. When nvmet receives commands with metadata, a continuous memory leak occurs within the kmalloc-128 slab, specifically concerning bio integrity. This issue arises because the bio uninit function was not being used after bio init for inline bios, leading to incomplete deallocation of integrity data.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:18134
ALSA-2026:18587
BDU:2025-10790
CVE-2025-38405
OPENSUSE-SU-2025:20081-1
RHSA-2026:18134
RHSA-2026:18587
SUSE-SU-2025:21074-1
SUSE-SU-2025:21139-1
SUSE-SU-2025:21179-1
SUSE-SU-2026:20560-1
USN-7833-1
USN-7833-2
USN-7833-3
USN-7833-4
USN-7834-1
USN-7856-1
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu