CVE-2025-38419
published 2025-07-25CVE-2025-38419: In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in…
medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
In the Linux kernel, the following vulnerability has been resolved:
remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()
When rproc->state = RPROC_DETACHED and rproc_attach() is used
to attach to the remote processor, if rproc_handle_resources()
returns a failure, the resources allocated by imx_rproc_prepare()
should be released, otherwise the following memory leak will occur.
Since almost the same thing is done in imx_rproc_prepare() and
rproc_resource_cleanup(), Function rproc_resource_cleanup() is able
to deal with empty lists so it is better to fix the "goto" statements
in rproc_attach(). replace the "unprepare_device" goto statement with
"clean_up_resources" and get rid of the "unprepare_device" label.
unreferenced object 0xffff0000861c5d00 (size 128):
comm "kworker/u12:3", pid 59, jiffies 4294893509 (age 149.220s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 02 88 00 00 00 00 00 00 10 00 00 00 00 00 ............
backtrace:
[] slab_post_alloc_hook+0x98/0x37c
[] __kmem_cache_alloc_node+0x138/0x2e0
[] kmalloc_trace+0x40/0x158
[] rproc_mem_entry_init+0x60/0xf8
[] imx_rproc_prepare+0xe0/0x180
[] rproc_boot+0x2ec/0x528
[] rproc_add+0x124/0x17c
[] imx_rproc_probe+0x4ec/0x5d4
[] platform_probe+0x68/0xd8
[] really_probe+0x110/0x27c
[] __driver_probe_device+0x78/0x12c
[] driver_probe_device+0x3c/0x118
[] __device_attach_driver+0xb8/0xf8
[] bus_for_each_drv+0x84/0xe4
[] __device_attach+0xfc/0x18c
[] device_initial_probe+0x14/0x20
Affected
30 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 6.1.147-1 (bookworm) | linux 6.1.147-1 (bookworm) |
| debian | linux-6.1 | < linux 6.1.147-1 (bookworm) | linux 6.1.147-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 10a3d4079eaea06472f1981152e2840e7232ffa9 < c56d6ef2711ee51b54f160ad0f25a381561f0287 | c56d6ef2711ee51b54f160ad0f25a381561f0287 |
| linux | linux | >= 10a3d4079eaea06472f1981152e2840e7232ffa9 < 82208ce9505abb057afdece7c62a14687c52c9ca | 82208ce9505abb057afdece7c62a14687c52c9ca |
| linux | linux | >= 10a3d4079eaea06472f1981152e2840e7232ffa9 < 9515d74c9d1ae7308a02e8bd4f894eb8137cf8df | 9515d74c9d1ae7308a02e8bd4f894eb8137cf8df |
| linux | linux | >= 10a3d4079eaea06472f1981152e2840e7232ffa9 < 92776ca0ccfe78b9bfe847af206bad641fb11121 | 92776ca0ccfe78b9bfe847af206bad641fb11121 |
| linux | linux | >= 10a3d4079eaea06472f1981152e2840e7232ffa9 < 5434d9f2fd68722b514c14b417b53a8af02c4d24 | 5434d9f2fd68722b514c14b417b53a8af02c4d24 |
| linux | linux | >= 10a3d4079eaea06472f1981152e2840e7232ffa9 < 7692c9fbedd9087dc9050903f58095915458d9b1 | 7692c9fbedd9087dc9050903f58095915458d9b1 |
| linux | linux_kernel | >= 0 < 6.1.147-1 | 6.1.147-1 |
| linux | linux_kernel | >= 0 < 6.12.35-1 | 6.12.35-1 |
| linux | linux_kernel | >= 0 < 6.12.35-1 | 6.12.35-1 |
| linux | linux_kernel | >= 0 < 5.15.0-156.166 | 5.15.0-156.166 |
| linux | linux_kernel | >= 0 < 6.8.0-100.100 | 6.8.0-100.100 |
| linux | linux_kernel | >= 5.13 < 5.15.186 | 5.15.186 |
| linux | linux_kernel | >= 5.16 < 6.1.142 | 6.1.142 |
| linux | linux_kernel | >= 6.13 < 6.15.4 | 6.15.4 |
| linux | linux_kernel | >= 6.2 < 6.6.95 | 6.6.95 |
| linux | linux_kernel | >= 6.7 < 6.12.35 | 6.12.35 |
| msrc | azl3_kernel_6.6.92.2-2_on_azure_linux_3.0 | — | — |
| ubuntu | linux-aws | — | — |
| ubuntu | linux-aws-6.8 | — | — |
| ubuntu | linux-gkeop | — | — |
| ubuntu | linux-nvidia | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.6MEDIUM