PT-2025-22170 · Linux+4 · Linux Kernel+4

Published 2025-04-24 · Updated 2026-02-03 · CVE-2025-37908

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified where the slab->obj exts is not properly cleaned up when memory allocation profiling is disabled, leading to potential errors such as "Bad page state in process" and pages being dumped because they are still charged to a cgroup. This occurs because unaccount slab() does not clear slab->obj exts when mem alloc profiling enabled() is not true.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Weakness Enumeration

CWE-459

CWE-770

Related Identifiers

BDU:2025-12292

CVE-2025-37908

USN-7649-1

USN-7649-2

USN-7650-1

USN-7665-1

USN-7665-2

USN-7721-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 146

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37908.json · Exploit
• https://ubuntu.com/security/CVE-2025-37968 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7649-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7650-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37911 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37955 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37954 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7721-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37917 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37898 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37956 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37930 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-37908 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37963 · Vendor Advisory