PT-2025-33596 · Linux+5 · Linux Kernel+5

Published

2025-07-16

·

Updated

2026-04-20

·

CVE-2025-38549

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A memory leak exists in the efivarfs filesystem when processing mount options. Specifically, the efivarfs fs info structure is allocated early during filesystem context initialization but may not be freed if the filesystem context is released before the fill super function is called, such as during error paths or reconfiguration. This can lead to a memory leak as ownership of the structure is never transferred to the superblock. The issue is addressed by implementing a .free callback in efivarfs context ops to ensure proper freeing of the allocated structure when the filesystem context is torn down before fill super.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Improper Initialization

Weakness Enumeration

CWE-401CWE-665

Related Identifiers

BDU:2025-15169
CVE-2025-38549
OPENSUSE-SU-2025:20081-1
SUSE-SU-2025:21074-1
SUSE-SU-2025:21139-1
SUSE-SU-2025:21179-1
USN-7879-1
USN-7879-2
USN-7879-3
USN-7879-4
USN-7880-1
USN-7934-1
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu