CVE-2025-38419

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38419
In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() When rproc->state = RPROC_DETACHED and rproc_attach() is used to attach to the remote processor, if rproc_handle_resources() returns a failure, the resources allocated by imx_rproc_prepare() should be released, otherwise the following memory leak will occur. Since almost the same thing is done in imx_rproc_prepare() and rproc_resource_cleanup(), Function rproc_resource_cleanup() is able to deal with empty lists so it is better to fix the "goto" statements in rproc_attach(). replace the "unprepare_device" goto statement with "clean_up_resources" and get rid of the "unprepare_device" label. unreferenced object 0xffff0000861c5d00 (size 128): comm "kworker/u12:3", pid 59, jiffies 4294893509 (age 149.220s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 02 88 00 00 00 00 00 00 10 00 00 00 00 00 ............ backtrace: [<00000000f949fe18>] slab_post_alloc_hook+0x98/0x37c [<00000000adbfb3e7>] __kmem_cache_alloc_node+0x138/0x2e0 [<00000000521c0345>] kmalloc_trace+0x40/0x158 [<000000004e330a49>] rproc_mem_entry_init+0x60/0xf8 [<000000002815755e>] imx_rproc_prepare+0xe0/0x180 [<0000000003f61b4e>] rproc_boot+0x2ec/0x528 [<00000000e7e994ac>] rproc_add+0x124/0x17c [<0000000048594076>] imx_rproc_probe+0x4ec/0x5d4 [<00000000efc298a1>] platform_probe+0x68/0xd8 [<00000000110be6fe>] really_probe+0x110/0x27c [<00000000e245c0ae>] __driver_probe_device+0x78/0x12c [<00000000f61f6f5e>] driver_probe_device+0x3c/0x118 [<00000000a7874938>] __device_attach_driver+0xb8/0xf8 [<0000000065319e69>] bus_for_each_drv+0x84/0xe4 [<00000000db3eb243>] __device_attach+0xfc/0x18c [<0000000072e4e1a4>] device_initial_probe+0x14/0x20

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5434d9f2fd68722b514c14b417b53a8af02c4d24 Patch
https://git.kernel.org/stable/c/7692c9fbedd9087dc9050903f58095915458d9b1 Patch
https://git.kernel.org/stable/c/82208ce9505abb057afdece7c62a14687c52c9ca Patch
https://git.kernel.org/stable/c/92776ca0ccfe78b9bfe847af206bad641fb11121 Patch
https://git.kernel.org/stable/c/9515d74c9d1ae7308a02e8bd4f894eb8137cf8df Patch
https://git.kernel.org/stable/c/c56d6ef2711ee51b54f160ad0f25a381561f0287 Patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Third Party Advisory Mailing List
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
History

23 Dec 2025, 18:42

Type Values Removed Values Added
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Debian
Debian debian Linux
Linux linux Kernel
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/5434d9f2fd68722b514c14b417b53a8af02c4d24 - () https://git.kernel.org/stable/c/5434d9f2fd68722b514c14b417b53a8af02c4d24 - Patch
References () https://git.kernel.org/stable/c/7692c9fbedd9087dc9050903f58095915458d9b1 - () https://git.kernel.org/stable/c/7692c9fbedd9087dc9050903f58095915458d9b1 - Patch
References () https://git.kernel.org/stable/c/82208ce9505abb057afdece7c62a14687c52c9ca - () https://git.kernel.org/stable/c/82208ce9505abb057afdece7c62a14687c52c9ca - Patch
References () https://git.kernel.org/stable/c/92776ca0ccfe78b9bfe847af206bad641fb11121 - () https://git.kernel.org/stable/c/92776ca0ccfe78b9bfe847af206bad641fb11121 - Patch
References () https://git.kernel.org/stable/c/9515d74c9d1ae7308a02e8bd4f894eb8137cf8df - () https://git.kernel.org/stable/c/9515d74c9d1ae7308a02e8bd4f894eb8137cf8df - Patch
References () https://git.kernel.org/stable/c/c56d6ef2711ee51b54f160ad0f25a381561f0287 - () https://git.kernel.org/stable/c/c56d6ef2711ee51b54f160ad0f25a381561f0287 - Patch
References () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html - () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html - Third Party Advisory, Mailing List

03 Nov 2025, 18:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: remoteproc: core: Limpieza de recursos adquiridos cuando rproc_handle_resources() falla en rproc_attach(). Cuando rproc-&gt;state = RPROC_DETACHED y rproc_attach() se usa para conectarse al procesador remoto, si rproc_handle_resources() falla, se deben liberar los recursos asignados por imx_rproc_prepare(); de lo contrario, se producirá la siguiente fuga de memoria. Dado que se realiza prácticamente lo mismo en imx_rproc_prepare() y rproc_resource_cleanup(), la función rproc_resource_cleanup() puede procesar listas vacías, por lo que es recomendable corregir las instrucciones "goto" en rproc_attach(). Reemplace la instrucción goto "unprepare_device" por "clean_up_resources" y elimine la etiqueta "unprepare_device". unreferenced object 0xffff0000861c5d00 (size 128): comm "kworker/u12:3", pid 59, jiffies 4294893509 (age 149.220s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 02 88 00 00 00 00 00 00 10 00 00 00 00 00 ............ backtrace: [&lt;00000000f949fe18&gt;] slab_post_alloc_hook+0x98/0x37c [&lt;00000000adbfb3e7&gt;] __kmem_cache_alloc_node+0x138/0x2e0 [&lt;00000000521c0345&gt;] kmalloc_trace+0x40/0x158 [&lt;000000004e330a49&gt;] rproc_mem_entry_init+0x60/0xf8 [&lt;000000002815755e&gt;] imx_rproc_prepare+0xe0/0x180 [&lt;0000000003f61b4e&gt;] rproc_boot+0x2ec/0x528 [&lt;00000000e7e994ac&gt;] rproc_add+0x124/0x17c [&lt;0000000048594076&gt;] imx_rproc_probe+0x4ec/0x5d4 [&lt;00000000efc298a1&gt;] platform_probe+0x68/0xd8 [&lt;00000000110be6fe&gt;] really_probe+0x110/0x27c [&lt;00000000e245c0ae&gt;] __driver_probe_device+0x78/0x12c [&lt;00000000f61f6f5e&gt;] driver_probe_device+0x3c/0x118 [&lt;00000000a7874938&gt;] __device_attach_driver+0xb8/0xf8 [&lt;0000000065319e69&gt;] bus_for_each_drv+0x84/0xe4 [&lt;00000000db3eb243&gt;] __device_attach+0xfc/0x18c [&lt;0000000072e4e1a4&gt;] device_initial_probe+0x14/0x20

25 Jul 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-25 14:15

Updated : 2025-12-23 18:42

NVD link : CVE-2025-38419

Mitre link : CVE-2025-38419

CVE.ORG link : CVE-2025-38419

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime