Memory Leak Vulnerability in Linux Kernel: Impacting Debian Packages
Summary
DEBIAN-CVE-2025-38417: In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in attaching VF procedure and allocate required port representor mem... Affects linux versions < 6.12.35-1. Fixed in 6.12.35-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system, enabling communication between hardware and software. The kernel is crucial for system stability and performance, and vulnerabilities within it can lead to significant security risks, including memory leaks that may affect system performance and reliability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ice driver related to memory management. Specifically, a memory leak occurs during the reset scenario of Virtual Functions (VFs) when the device is configured in switchdev mode. The current implementation allocates memory for port representor structures without checking the operational mode, leading to unfreed memory in legacy mode. This can result in increased memory consumption and potential system instability.
How To Fix
Minimum fixed version
6.12.35-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using switchdev mode if possible, or monitor memory usage closely to identify any potential leaks until the patch is applied.
Conclusion
The identified memory leak vulnerability in the Linux kernel's ice driver poses a risk to Debian systems. Users are advised to update their Linux packages to the latest version to mitigate this issue. Monitoring tools like Vulert can assist in identifying vulnerabilities in real-time, ensuring system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a memory leak in the ice driver of the Linux kernel, which can lead to increased memory usage and potential system instability.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Check your application against the vulnerability using the Vulert playground at Vulert Scanner.
The vulnerability affects Debian 13 and Debian 14, specifically versions of the Linux kernel prior to 6.12.35-1.
If exploited, this vulnerability could lead to excessive memory consumption, which may degrade system performance and stability.
Yes, updating to the patched version of the Linux kernel (6.12.35-1 or later) will resolve the vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
