CVE-2025-38409

Katalog CVE

CVSS 5.5 · Medium EPSS 0,17%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path put_unused_fd() doesn't free the installed file, if we've already done fd_install(). So we need to also free the sync_file. Patchwork: https://patchwork.freedesktop.org/patch/653583/

Rincian

Terbit di NVD

25 Juli 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 5,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/00b3401f692082ddf6342500d1be25560bba46d4 patch
• https://git.kernel.org/stable/c/30d3819b0b9173e31b84d662a592af8bad351427 patch
• https://git.kernel.org/stable/c/3f6ce8433a9035b0aa810e1f5b708e9dc1c367b0 patch
• https://git.kernel.org/stable/c/c40ad1c04d306f7fde26337fdcf8a5979657d93f patch
• https://git.kernel.org/stable/c/f681c2aa8676a890eacc84044717ab0fd26e058f patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html advisory pihak ketiga