Memory Management Error in Linux Kernel: Vulnerability in Linux Package
Summary
CVE-2025-38321: In the Linux kernel, the following vulnerability has been resolved: smb: Log an error when close_all_cached_dirs fails Under low-memory conditions, close_all_cached_dirs() can't move the dentries to a separate list to dp... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionality for managing system resources and hardware interactions. It is widely used in various environments, from servers to personal computers. This vulnerability affects the kernel's handling of cached directories under low-memory conditions, which can lead to system instability and potential data loss.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified where the function close_all_cached_dirs() fails to manage directory entries (dentries) correctly under low-memory conditions. This failure can result in a 'Dentry still in use' error, indicating that the system is unable to free up memory resources effectively. The error message logged during this event provides insight into the memory allocation issues faced by the kernel, which can lead to further complications in system operations.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, monitoring system memory usage and ensuring adequate resources are available can help mitigate the impact of this issue temporarily.
Conclusion
The CVE-2025-38321 vulnerability in the Linux kernel presents significant risks related to memory management under low-memory conditions. It is crucial for users to update their Linux packages to the patched version to ensure system stability and security. Regular monitoring and resource management can also help mitigate potential impacts until updates are applied.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38321 is a vulnerability in the Linux kernel that affects memory management under low-memory conditions, leading to potential system errors.
This vulnerability can cause system instability and errors related to memory allocation, which may impact the performance and reliability of your system.
Yes, a patch is available in version 6.12.35-1 of the Linux package. It is recommended to update to this version or later.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
While there are no specific workarounds, ensuring your system has adequate memory resources can help mitigate the effects of this vulnerability until an update can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
