PT-2025-30805
CVE-2025-38405
·
Published
2025-06-25
·
Updated
2026-10-13
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a memory leak in the nvmet subsystem related to bio integrity. When nvmet receives commands with metadata, a continuous memory leak occurs within the kmalloc-128 slab, specifically concerning bio integrity. This issue arises because the
bio uninit function was not being used after bio init for inline bios, leading to incomplete deallocation of integrity data.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾