Bug 2378979 (CVE-2025-38258) - CVE-2025-38258 kernel: mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write
Summary: CVE-2025-38258 kernel: mm/damon/sysfs-schemes: free old damon_sysfs_scheme_fi...
Keywords:
Status: NEW
Alias: CVE-2025-38258
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-07-09 11:01 UTC by OSIDB Bzimport
Modified: 2025-07-09 17:54 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-07-09 11:01:28 UTC
In the Linux kernel, the following vulnerability has been resolved:

mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write

memcg_path_store() assigns a newly allocated memory buffer to
filter->memcg_path, without deallocating the previously allocated and
assigned memory buffer.  As a result, users can leak kernel memory by
continuously writing a data to memcg_path DAMOS sysfs file.  Fix the leak
by deallocating the previously set memory buffer.


Note You need to log in before you can comment on or make changes to this bug.