PT-2025-29066 · Linux+6 · Linux Kernel+6

Seunghun Han · Published 2025-03-26 · Updated 2026-05-26 · CVE-2025-38344

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.12.0-rc4-next-20170608+ and earlier

Description: The Linux kernel contains an ACPICA cache leak in ACPI early abort cases. Specifically, the “Acpi-Parse” and “Acpi-parse ext” caches were found to be leaked due to the use of the SLAB NEVER MERGE flag in the kmem cache create() function. This occurs when the size of cache objects is the same as the slab cache size, leading to a merge of the “Acpi-State” cache.

Recommendations: Linux Kernel versions prior to 4.12.0-rc4-next-20170608+ should be updated.

Exploit

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-64968

BDU:2025-08802

CVE-2025-38344

DLA-4327-1

DLA-4328-1

DSA-5973-1

ECHO-F35B-FA33-FA6F

MGASA-2025-0218

MGASA-2025-0219

OESA-2026-2417

OESA-2026-2418

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:02853-1

SUSE-SU-2025:02923-1

SUSE-SU-2025:02969-1

SUSE-SU-2025:02996-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025:03023-1

SUSE-SU-2025:20577-1

SUSE-SU-2025:20586-1

SUSE-SU-2025:20601-1

SUSE-SU-2025:20602-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02969-1

SUSE-SU-2025_02996-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

SUSE-SU-2025_03023-1

USN-7774-1

USN-7774-2

USN-7774-3

USN-7774-4

USN-7774-5

USN-7775-1

USN-7775-2

USN-7775-3

USN-7776-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Astra Linux

Debian

Linux Kernel

Linuxmint

Red Os

Suse

Ubuntu

References · 3373

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38344.json · Exploit
• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38396 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38421 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22001 · Security Note
• https://ubuntu.com/security/CVE-2025-38576 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39734 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68183 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23157 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39795 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4328-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40254 · Security Note