Memory Leak Vulnerability in Linux Kernel: Debian Packages Affected
Summary
DEBIAN-CVE-2025-21770: In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential memory leak in iopf_queue_remove_device() The iopf_queue_remove_device() helper removes a device from the per-iommu iopf queue when... Affects linux versions < 6.12.16-1. Fixed in 6.12.16-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware resources and providing essential services to applications. It is known for its stability, performance, and security features. However, vulnerabilities can arise, affecting its functionality and the overall security of systems running Debian. This specific vulnerability pertains to the handling of device removal in the IOMMU subsystem, which can lead to memory leaks.
Vulnerability Detail
In the Linux kernel, a vulnerability exists in the iommu subsystem, specifically in the iopf_queue_remove_device() function. When a device is removed from the IOMMU's per-device queue while the PRI (Page Request Interface) is disabled, the function fails to release the associated group structure that holds pending IOPFs (I/O Page Faults). This oversight can lead to a memory leak, as the group structure remains allocated even after the device has been detached, potentially exhausting system memory over time.
How To Fix
Minimum fixed version
6.12.16-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating the Linux kernel package.
Conclusion
The memory leak vulnerability in the Linux kernel affects Debian packages and poses a risk to system performance. Users are encouraged to update their kernel to the patched version 6.12.16-1 to mitigate this issue. Regular updates and monitoring are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to memory leaks, which may degrade system performance and stability over time.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
While the primary risk is memory leakage, which can affect performance, there is no direct indication of data loss associated with this vulnerability.
It is recommended to regularly check for updates and apply them promptly to ensure your system is protected against known vulnerabilities.
If immediate updates are not possible, monitor system performance closely and consider isolating affected systems until the patch can be applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
