PT-2025-49055 · Linux+2 · Linux Kernel+2

Published 2025-12-04 · Updated 2026-02-24 · CVE-2025-40228

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the mm/damon/sysfs interface. This interface dynamically allocates a damon ctx object for testing the validity of inputs for online DAMON parameters. The object is used without a check to ensure successful allocation, potentially leading to a memory leak if the test succeeds and an invalid memory access if allocation fails. The issue is addressed by directly returning an error when allocation fails.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-40228

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 391

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40228.json · Exploit
• https://ubuntu.com/security/CVE-2025-40153 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40066 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40331 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40063 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40035 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40049 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40085 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40315 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40223 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68246 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory