Kernel Memory Leak Vulnerability in Linux Package - CVE-2025-38565
Summary
CVE-2025-38565: In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perf_mmap() fail When perf_mmap() fails to allocate a buffer, it still invokes the event_mapped() callback of the related event... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It is widely used across various platforms, including servers, desktops, and embedded systems. The kernel's performance and security are critical, as vulnerabilities can lead to system instability and security breaches. This specific vulnerability affects the 'linux' package across multiple Debian versions, highlighting the importance of maintaining an updated and secure kernel.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the perf subsystem, specifically in the perf_mmap() function. When perf_mmap() fails to allocate a buffer, it incorrectly invokes the event_mapped() callback, which can lead to an increase in the perf_rdpmc_allowed reference counter. This situation results in a reference count leak, as the corresponding perf_mmap_close() function is never called to decrement the counter. The vulnerability can potentially lead to resource exhaustion and system instability, making it critical to address.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating the package as described in the 'how_to_fix' section.
Conclusion
CVE-2025-38565 is a critical vulnerability in the Linux kernel that can lead to memory leaks and system instability. It is essential for users to update their 'linux' package to the latest version to ensure their systems remain secure. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38565 is a vulnerability in the Linux kernel that can lead to a memory leak due to improper handling of buffer allocation failures in the perf subsystem.
The vulnerability affects multiple Debian versions, including Debian 11, 12, 13, and 14, all utilizing the 'linux' package.
If exploited, this vulnerability could lead to resource exhaustion, system instability, and potentially allow for further attacks on the system.
You can use Vulert, a tool that monitors and alerts for open-source vulnerabilities, to check if your application is affected by this vulnerability. Visit Vulert Scanner to use the Vulert playground without any signup.
Yes, a patch is available. Users are advised to update their 'linux' package to the latest version to mitigate the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
