Kernel Vulnerability in Linux Package: Slab Memory Management Issue
Summary
DEBIAN-CVE-2025-37774: In the Linux kernel, the following vulnerability has been resolved: slab: ensure slab->obj_exts is clear in a newly allocated slab page ktest recently reported crashes while running several buffered io tests with alloc_t... Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, responsible for managing system resources and providing essential services to applications. It is known for its stability, performance, and extensive hardware support. However, recent vulnerabilities have raised concerns regarding memory management, specifically related to slab allocation, which can lead to system crashes and instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the slab memory management system. This issue arises from the failure to clear the 'obj_exts' field in newly allocated slab pages, leading to potential crashes when this field is accessed without proper initialization. The vulnerability was reported during buffered I/O tests, resulting in invalid address dereferences and kernel panics. The crash logs indicate that the kernel encounters a NULL pointer dereference, which can severely impact system stability and reliability.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability other than applying the patch. Users are encouraged to monitor their systems for any unusual behavior and apply the update as soon as it is available.
Conclusion
The identified vulnerability in the Linux package's slab memory management poses significant risks to system stability. Users are urged to update to the patched version to ensure their systems remain secure and functional. Regular monitoring and prompt updates are essential to mitigate such vulnerabilities.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves improper initialization of the 'obj_exts' field in slab memory management, which can lead to kernel crashes.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If exploited, this vulnerability can lead to system crashes, data loss, and overall instability of the operating system.
Yes, a patch is available in version 6.12.25-1 of the Linux package. Users should update to this version to mitigate the risk.
While there are no specific workarounds, it is advisable to monitor system behavior closely and apply the update as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
