What’s Vulnerable › Vulnerabilities

CVE-2025-38258: mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-09 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write memcg_path_store() assigns a newly allocated memory buffer to filter->memcg_path, without deallocating the previously allocated and assigned memory buffer. As a result, users can leak kernel memory by continuously writing a data to memcg_path DAMOS sysfs file. Fix the leak by deallocating the previously set memory buffer.

Affected products

• Linux kernel: from 6.3 before 6.6.96; from 6.7 before 6.12.36; from 6.13 before 6.15.5; 6.16-rc1, 6.16-rc2, 6.16-rc3 — fixed in 6.12.36, 6.15.5, 6.6.96

How to fix

Upgrade to a fixed version: Linux kernel 6.12.36, 6.15.5, 6.6.96. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/490a43d07f1663d827e802720d30cbc0494e4f81
• https://git.kernel.org/stable/c/4a158ac0538dd5695eeaa00aa0720d711f3e4ef1
• https://git.kernel.org/stable/c/4f489fe6afb395dbc79840efa3c05440b760d883
• https://git.kernel.org/stable/c/c5d5b0047b0c0f304608f3824139f7bd34c48413

Get alerted when CVE-2025-38258 or the next vulnerability affects your stack