Memory Leak Vulnerability in Linux Kernel's efivarfs Package
Summary
DEBIAN-CVE-2025-38549: In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths When processing mount options, efivarfs allocates efivarfs_fs_info (sfi) early i... Affects linux versions < 6.12.41-1. Fixed in 6.12.41-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. The efivarfs package is a filesystem interface that allows access to EFI variables, which are used for system configuration and boot management. This package is critical for systems that utilize UEFI firmware, enabling them to interact with EFI variables effectively. However, the efivarfs package has been identified to have a memory leak vulnerability that can lead to inefficient memory usage and potential system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the efivarfs package related to memory management. Specifically, when processing mount options, efivarfs allocates a structure called efivarfs_fs_info (sfi) early in the fs_context initialization process. If the fs_context is released before the fill_super function is called—such as during error handling or reconfiguration—the sfi structure is not properly freed, leading to a memory leak. This issue arises because the ownership of the sfi structure does not transfer to the superblock, which is typically responsible for freeing associated resources. The ramifications of this vulnerability include increased memory consumption and potential system performance degradation over time.
How To Fix
Minimum fixed version
6.12.41-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patches as soon as possible to mitigate the risk.
Conclusion
The memory leak vulnerability in the efivarfs package of the Linux kernel poses a risk of inefficient memory usage and system instability. It is crucial for users to update their systems to the patched versions to mitigate this risk. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The efivarfs package is a filesystem interface in the Linux kernel that allows access to EFI variables used for system configuration and boot management.
The memory leak vulnerability in efivarfs occurs when allocated memory is not freed properly, leading to increased memory usage and potential system instability.
You can use Vulert, a tool that monitors and alerts for open-source vulnerabilities in your software. By uploading your manifest file, you can check for vulnerabilities without needing to access the code.
Failing to address this vulnerability can lead to increased memory consumption, which may degrade system performance and stability over time.
It is advisable to regularly check for updates to your Linux kernel and apply them promptly to ensure security and stability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
