Memory Leak Vulnerability in Linux Kernel - Package: linux
Summary
DEBIAN-CVE-2025-38228: In the Linux kernel, the following vulnerability has been resolved: media: imagination: fix a potential memory leak in e5010_probe() Add video_device_release() to release the memory allocated by video_device_alloc() if s... Affects linux versions < 6.12.35-1. Fixed in 6.12.35-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used across various platforms, including servers, desktops, and embedded systems. The kernel's robustness and flexibility make it a popular choice, but its complexity can lead to vulnerabilities, such as the one identified in this report.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the media subsystem, specifically within the imagination driver. The issue arises in the e5010_probe() function, where a potential memory leak could occur if the function fails after allocating memory with video_device_alloc(). This could lead to increased memory consumption and, in severe cases, system instability or crashes. The vulnerability has been assigned the identifier DEBIAN-CVE-2025-38228.
How To Fix
Minimum fixed version
6.12.35-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been provided for this vulnerability. It is advisable to apply the patch as soon as it becomes available to mitigate any risks associated with the memory leak.
Conclusion
The memory leak vulnerability in the Linux kernel's media subsystem poses a risk to system stability. Users are encouraged to update their linux package to the patched version 6.12.35-1 to mitigate this risk. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a potential memory leak in the e5010_probe() function of the Linux kernel's media subsystem.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If exploited, this vulnerability could lead to increased memory usage, potentially causing system instability or crashes.
Yes, a patch has been released in version 6.12.35-1 of the linux package.
You can update your linux package by running the command: sudo apt-get update && sudo apt-get install linux in your terminal.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
