Memory Leak Vulnerability in Linux Kernel - linux Package
Summary
DEBIAN-CVE-2025-37980: In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a queue fails after blk_mq_sysfs_register() is successful but the function... Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux package is a core component of the Debian operating system, providing the essential kernel that manages system resources and hardware interactions. It is crucial for the overall functionality and stability of the system. The kernel is responsible for managing memory, processes, and device drivers, making it a vital part of any Linux-based operating system. This vulnerability specifically affects the resource management within the kernel, leading to potential memory leaks under certain error conditions.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to resource management in the blk_register_queue() function. When registering a queue fails after the successful execution of blk_mq_sysfs_register(), the function encounters an error that prevents proper cleanup of the blk_mq_sysfs resources. This oversight can lead to a memory leak, which may degrade system performance over time and potentially lead to system instability. The vulnerability is classified under DEBIAN-CVE-2025-37980 and affects versions prior to 6.12.25-1.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch by updating the package as mentioned in the 'how_to_fix' section.
Conclusion
The identified vulnerability in the linux package of the Debian operating system poses a risk of memory leaks due to improper resource management in the kernel. Users are encouraged to update to the patched version to ensure system stability and performance. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to memory leaks, which may degrade system performance and stability over time.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, a patch is available in version 6.12.25-1 of the linux package.
While there are no specific workarounds, it is advisable to monitor system performance and apply the update as soon as possible.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-37980.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
