cbcvebase.
CVE-2025-38418
published 2025-07-25

CVE-2025-38418: In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc->clean_table after rproc_attach() fails When rproc->state =…

medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc->clean_table after rproc_attach() fails When rproc->state = RPROC_DETACHED is attached to remote processor through rproc_attach(), if rproc_handle_resources() returns failure, then the clean table should be released, otherwise the following memory leak will occur. unreferenced object 0xffff000086a99800 (size 1024): comm "kworker/u12:3", pid 59, jiffies 4294893670 (age 121.140s) hex dump (first 32 bytes): 00 00 00 00 00 80 00 00 00 00 00 00 00 00 10 00 ............ 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 ............ backtrace: [] slab_post_alloc_hook+0x98/0x3fc [] __kmem_cache_alloc_node+0x13c/0x230 [] __kmalloc_node_track_caller+0x5c/0x260 [] kmemdup+0x34/0x60 [] rproc_boot+0x35c/0x56c [] rproc_add+0x124/0x17c [] imx_rproc_probe+0x4ec/0x5d4 [] platform_probe+0x68/0xd8 [] really_probe+0x110/0x27c [] __driver_probe_device+0x78/0x12c [] driver_probe_device+0x3c/0x118 [] __device_attach_driver+0xb8/0xf8 [] bus_for_each_drv+0x84/0xe4 [] __device_attach+0xfc/0x18c [] device_initial_probe+0x14/0x20 [] bus_probe_device+0xb0/0xb4 unreferenced object 0xffff0000864c9690 (size 16):

Affected

30 ranges· showing 25
VendorProductVersion rangeFixed in
debiandebian_linux
debianlinux< linux 6.1.147-1 (bookworm)linux 6.1.147-1 (bookworm)
debianlinux-6.1< linux 6.1.147-1 (bookworm)linux 6.1.147-1 (bookworm)
linuxlinux
linuxlinux>= 9dc9507f1880fb6225e3e058cb5219b152cbf198 < 3562c09feeb8d8e9d102ce6840e8c7d57a7feb5c3562c09feeb8d8e9d102ce6840e8c7d57a7feb5c
linuxlinux>= 9dc9507f1880fb6225e3e058cb5219b152cbf198 < bf876fd9dc2d0c9fff96aef63d4346719f206fc1bf876fd9dc2d0c9fff96aef63d4346719f206fc1
linuxlinux>= 9dc9507f1880fb6225e3e058cb5219b152cbf198 < 3ee979709e16a83b257bc9a544a7ff71fd445ea93ee979709e16a83b257bc9a544a7ff71fd445ea9
linuxlinux>= 9dc9507f1880fb6225e3e058cb5219b152cbf198 < f4ef928ca504c996f9222eb2c59ac6d6eefd9c75f4ef928ca504c996f9222eb2c59ac6d6eefd9c75
linuxlinux>= 9dc9507f1880fb6225e3e058cb5219b152cbf198 < 6fe9486d709e4a60990843832501ef6556440ca76fe9486d709e4a60990843832501ef6556440ca7
linuxlinux>= 9dc9507f1880fb6225e3e058cb5219b152cbf198 < bcd241230fdbc6005230f80a4f8646ff5a84f15bbcd241230fdbc6005230f80a4f8646ff5a84f15b
linuxlinux_kernel>= 0 < 6.1.147-16.1.147-1
linuxlinux_kernel>= 0 < 6.12.35-16.12.35-1
linuxlinux_kernel>= 0 < 6.12.35-16.12.35-1
linuxlinux_kernel>= 0 < 5.15.0-156.1665.15.0-156.166
linuxlinux_kernel>= 0 < 6.8.0-100.1006.8.0-100.100
linuxlinux_kernel>= 5.13 < 5.15.1865.15.186
linuxlinux_kernel>= 5.16 < 6.1.1426.1.142
linuxlinux_kernel>= 6.13 < 6.15.46.15.4
linuxlinux_kernel>= 6.2 < 6.6.956.6.95
linuxlinux_kernel>= 6.7 < 6.12.356.12.35
msrcazl3_kernel_6.6.92.2-2_on_azure_linux_3.0
ubuntulinux-aws
ubuntulinux-aws-6.8
ubuntulinux-gkeop
ubuntulinux-nvidia

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.6MEDIUM