Memory Leak Vulnerability in Linux Kernel: Affected Packages - linux (Debian 13 & 14)
Summary
DEBIAN-CVE-2025-37764: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix firmware memory leaks Free the memory used to hold the results of firmware image processing when the module is unloaded. Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is known for its performance, security, and flexibility, making it a popular choice for servers, desktops, and embedded systems. The vulnerability identified as CVE-2025-37764 affects the linux package in Debian versions 13 and 14, specifically related to memory management in the drm/imagination subsystem.
Vulnerability Detail
In the Linux kernel, a vulnerability has been discovered in the drm/imagination subsystem that leads to memory leaks when firmware images are processed. This issue arises when the module is unloaded without freeing the memory allocated for firmware image processing results. Additionally, if the firmware image processing fails during module loading, the memory is not released, leading to unreferenced objects that can be detected by Kmemleak. This vulnerability can result in increased memory usage and potential denial of service if left unaddressed.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The CVE-2025-37764 vulnerability in the Linux kernel poses a significant risk due to memory leaks in the drm/imagination subsystem. Users are strongly encouraged to update their linux package to version 6.12.25-1 to mitigate this issue. Utilizing tools like Vulert can help in monitoring for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37764 is a vulnerability in the Linux kernel that causes memory leaks in the drm/imagination subsystem.
This vulnerability can lead to increased memory usage and potential denial of service if the memory leaks are not addressed.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, a patch is available in version 6.12.25-1 of the linux package. Updating to this version will resolve the issue.
While there are no specific workarounds, it is advisable to monitor your system for unusual memory usage until you can apply the patch.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
