In the Linux kernel, the following vulnerability has been resolved:
efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths
When processing mount options, efivarfs allocates efivarfs_fs_info (sfi)
early in fs_context initialization. However, sfi is associated with the
superblock and typically freed when the superblock is destroyed. If the
fs_context is released (final put) before fill_super is called—such as
on error paths or during reconfiguration—the sfi structure would leak,
as ownership never transfers to the superblock.
Implement the .free callback in efivarfs_context_ops to ensure any
allocated sfi is properly freed if the fs_context is torn down before
fill_super, preventing this memory leak.
References
Configurations
Configuration 1 (hide)
|
History
18 Nov 2025, 18:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/64e135f1eaba0bbb0cdee859af3328c68d5b9789 - Patch | |
| References | () https://git.kernel.org/stable/c/816d36973467d1c9c08a48bdffe4675e219a2e84 - Patch | |
| References | () https://git.kernel.org/stable/c/e9fabe7036bb8be6071f39dc38605508f5f57b20 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-401 | |
| First Time |
Linux linux Kernel
Linux |
Information
Published : 2025-08-16 12:15
Updated : 2025-11-18 18:10
NVD link : CVE-2025-38549
Mitre link : CVE-2025-38549
CVE.ORG link : CVE-2025-38549
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-401
Missing Release of Memory after Effective Lifetime