PT-2025-28003 · Linux+5 · Linux Kernel+5

Published 2025-07-04 · Updated 2026-03-04 · CVE-2025-38228

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A potential memory leak in the Linux kernel has been resolved. The issue was related to the e5010 probe() function, where memory allocated by video device alloc() was not properly released in case of an error. The fix involves adding video device release() to release the allocated memory.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-13480

CVE-2025-38228

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 1462

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38228.json · Exploit
• https://ubuntu.com/security/CVE-2025-38405 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38236 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7834-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38401 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38230 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38251 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38258 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38374 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38388 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20081-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38084 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38425 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38219 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38264 · Vendor Advisory