PT-2025-33764 · Linux+5 · Linux Kernel+5
Published
2025-08-05
·
Updated
2026-05-26
·
CVE-2025-38565
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A reference count leak exists in the
perf/core subsystem of the Linux kernel. Specifically, when perf mmap() fails to allocate a buffer, the event mapped() callback of the related event is still invoked, potentially increasing the perf rdpmc allowed reference counter. Because perf mmap close() is not called in this scenario, the reference count is not decremented, leading to a memory leak. The issue occurs when failing to allocate a buffer during the perf mmap() function call.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu