CVE-2025-38384
published 2025-07-25CVE-2025-38384: In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix memory leak of ECC engine conf Memory allocated for the ECC engine conf…
medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
In the Linux kernel, the following vulnerability has been resolved:
mtd: spinand: fix memory leak of ECC engine conf
Memory allocated for the ECC engine conf is not released during spinand
cleanup. Below kmemleak trace is seen for this memory leak:
unreferenced object 0xffffff80064f00e0 (size 8):
comm "swapper/0", pid 1, jiffies 4294937458
hex dump (first 8 bytes):
00 00 00 00 00 00 00 00 ........
backtrace (crc 0):
kmemleak_alloc+0x30/0x40
__kmalloc_cache_noprof+0x208/0x3c0
spinand_ondie_ecc_init_ctx+0x114/0x200
nand_ecc_init_ctx+0x70/0xa8
nanddev_ecc_engine_init+0xec/0x27c
spinand_probe+0xa2c/0x1620
spi_mem_probe+0x130/0x21c
spi_probe+0xf0/0x170
really_probe+0x17c/0x6e8
__driver_probe_device+0x17c/0x21c
driver_probe_device+0x58/0x180
__device_attach_driver+0x15c/0x1f8
bus_for_each_drv+0xec/0x150
__device_attach+0x188/0x24c
device_initial_probe+0x10/0x20
bus_probe_device+0x11c/0x160
Fix the leak by calling nanddev_ecc_engine_cleanup() inside
spinand_cleanup().
Affected
33 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 6.1.147-1 (bookworm) | linux 6.1.147-1 (bookworm) |
| debian | linux-6.1 | < linux 6.1.147-1 (bookworm) | linux 6.1.147-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 3d1f08b032dc4e168f3aefed1e07a63c3c080325 < 68d3417305ee100dcad90fd6e5846b22497aa394 | 68d3417305ee100dcad90fd6e5846b22497aa394 |
| linux | linux | >= 3d1f08b032dc4e168f3aefed1e07a63c3c080325 < f99408670407abb6493780e38cb4ece3fbb52cfc | f99408670407abb6493780e38cb4ece3fbb52cfc |
| linux | linux | >= 3d1f08b032dc4e168f3aefed1e07a63c3c080325 < d5c1e3f32902ab518519d05515ee6030fd6c59ae | d5c1e3f32902ab518519d05515ee6030fd6c59ae |
| linux | linux | >= 3d1f08b032dc4e168f3aefed1e07a63c3c080325 < c40b207cafd006c610832ba52a81cedee77adcb9 | c40b207cafd006c610832ba52a81cedee77adcb9 |
| linux | linux | >= 3d1f08b032dc4e168f3aefed1e07a63c3c080325 < 93147abf80a831dd3b5660b3309b4f09546073b2 | 93147abf80a831dd3b5660b3309b4f09546073b2 |
| linux | linux | >= 3d1f08b032dc4e168f3aefed1e07a63c3c080325 < 6463cbe08b0cbf9bba8763306764f5fd643023e1 | 6463cbe08b0cbf9bba8763306764f5fd643023e1 |
| linux | linux_kernel | < 5.15.187 | 5.15.187 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.1.147-1 | 6.1.147-1 |
| linux | linux_kernel | >= 0 < 6.12.37-1 | 6.12.37-1 |
| linux | linux_kernel | >= 0 < 6.12.37-1 | 6.12.37-1 |
| linux | linux_kernel | >= 0 < 5.15.0-156.166 | 5.15.0-156.166 |
| linux | linux_kernel | >= 0 < 6.8.0-100.100 | 6.8.0-100.100 |
| linux | linux_kernel | >= 5.16 < 6.1.144 | 6.1.144 |
| linux | linux_kernel | >= 6.13 < 6.15.6 | 6.15.6 |
| linux | linux_kernel | >= 6.2 < 6.6.97 | 6.6.97 |
| linux | linux_kernel | >= 6.7 < 6.12.37 | 6.12.37 |
| msrc | azl3_kernel_6.6.96.2-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_kernel_6.6.96.2-2_on_azure_linux_3.0 | — | — |
| msrc | cbl2_kernel_5.15.186.1-1_on_cbl_mariner_2.0 | — | — |
| ubuntu | linux-aws | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.6MEDIUM