CVE-2025-38258 – Linux Kernel Memcg Path Memory Leak

CVE ID : CVE-2025-38258

Published : July 9, 2025, 11:15 a.m. | 49 minutes ago

Description : In the Linux kernel, the following vulnerability has been resolved:

mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write

memcg_path_store() assigns a newly allocated memory buffer to
filter->memcg_path, without deallocating the previously allocated and
assigned memory buffer. As a result, users can leak kernel memory by
continuously writing a data to memcg_path DAMOS sysfs file. Fix the leak
by deallocating the previously set memory buffer.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…