CVE-2025-37980

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-37980
In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a queue fails after blk_mq_sysfs_register() is successful but the function later encounters an error, we need to clean up the blk_mq_sysfs resources. Add the missing blk_mq_sysfs_unregister() call in the error path to properly clean up these resources and prevent a memory leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/40f2eb9b531475dd01b683fdaf61ca3cfd03a51e Patch
https://git.kernel.org/stable/c/41e43134ddda35949974be40520460a12dda3502 Patch
https://git.kernel.org/stable/c/549cbbd14bbec12469ceb279b79c763c8a24224e Patch
https://git.kernel.org/stable/c/55a7bb2708f7c7c5b366d4e40916113168a3824c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
History

14 Nov 2025, 17:00

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/40f2eb9b531475dd01b683fdaf61ca3cfd03a51e - () https://git.kernel.org/stable/c/40f2eb9b531475dd01b683fdaf61ca3cfd03a51e - Patch
References () https://git.kernel.org/stable/c/41e43134ddda35949974be40520460a12dda3502 - () https://git.kernel.org/stable/c/41e43134ddda35949974be40520460a12dda3502 - Patch
References () https://git.kernel.org/stable/c/549cbbd14bbec12469ceb279b79c763c8a24224e - () https://git.kernel.org/stable/c/549cbbd14bbec12469ceb279b79c763c8a24224e - Patch
References () https://git.kernel.org/stable/c/55a7bb2708f7c7c5b366d4e40916113168a3824c - () https://git.kernel.org/stable/c/55a7bb2708f7c7c5b366d4e40916113168a3824c - Patch
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bloque: corrección de fuga de recursos en la ruta de error blk_register_queue(). Si el registro de una cola falla después de que blk_mq_sysfs_register() se ejecute correctamente, pero la función detecta un error posteriormente, es necesario limpiar los recursos blk_mq_sysfs. Agregue la llamada blk_mq_sysfs_unregister() faltante en la ruta de error para limpiar correctamente estos recursos y evitar una fuga de memoria.
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

20 May 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-20 17:15

Updated : 2025-11-14 17:00

NVD link : CVE-2025-37980

Mitre link : CVE-2025-37980

CVE.ORG link : CVE-2025-37980

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime