Memory Management Error in Linux Kernel: Linux Package Vulnerability
Summary
DEBIAN-CVE-2025-38321: In the Linux kernel, the following vulnerability has been resolved: smb: Log an error when close_all_cached_dirs fails Under low-memory conditions, close_all_cached_dirs() can't move the dentries to a separate list to dp... Affects linux versions < 6.12.35-1. Fixed in 6.12.35-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It is widely used across various distributions and is known for its stability and performance. However, like any complex software, it is susceptible to vulnerabilities that can affect system integrity and security.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to memory management during the operation of close_all_cached_dirs(). Under low-memory conditions, this function fails to move dentries to a separate list for proper deallocation, leading to a 'Dentry still in use' error. This can result in system instability and potential data loss, especially in environments relying on CIFS (Common Internet File System) for file sharing.
How To Fix
Minimum fixed version
6.12.35-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can minimize the use of CIFS shares under low-memory conditions to avoid triggering the vulnerability until the package is updated.
Conclusion
The identified vulnerability in the Linux kernel poses significant risks under low-memory conditions, particularly affecting systems using CIFS for file sharing. It is crucial for users to update to the patched version to ensure system stability and security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is related to memory management in the Linux kernel, specifically during the operation of closing cached directories under low-memory conditions.
It can lead to system instability and errors related to file sharing, particularly when using CIFS, which may result in data loss.
Yes, the vulnerability is fixed in version 6.12.35-1 of the Linux package.
As a workaround, try to limit the use of CIFS shares under low-memory conditions until you can apply the update.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application using the Vulert playground at Vulert Scanner without needing to sign up.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
