CVE-2025-39756

Linux kernel (affected versions not specified)

The Linux kernel contains a flaw related to file descriptor table allocations. When sysctl nr open is set to a very high value, processes attempting to use file descriptors near the limit can trigger massive memory allocation attempts exceeding INT MAX, resulting in a warning in mm/slub.c. This occurs because the kernel's allocation functions enforce INT MAX as a maximum size, regardless of memory control group accounting. Systemd automatically bumps fs.nr open to the maximum possible value, which can trigger this issue in certain selftests and programs testing file descriptor limits. The issue can lead to impractical memory allocation requests exceeding 8GB.

At the moment, there is no information about a newer version that contains a fix for this vulnerability.