PT-2025-37214 · Linux+5 · Linux Kernel+5
Published
2025-06-29
·
Updated
2026-04-20
·
CVE-2025-39756
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The Linux kernel contains a flaw related to file descriptor table allocations. When
sysctl nr open is set to a very high value, processes attempting to use file descriptors near the limit can trigger massive memory allocation attempts exceeding INT MAX, resulting in a warning in mm/slub.c. This occurs because the kernel's allocation functions enforce INT MAX as a maximum size, regardless of memory control group accounting. Systemd automatically bumps fs.nr open to the maximum possible value, which can trigger this issue in certain selftests and programs testing file descriptor limits. The issue can lead to impractical memory allocation requests exceeding 8GB.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu