Memory Leak Vulnerability in Linux Kernel Affecting Video Device Allocation

CVE-2025-38228

What is CVE-2025-38228?

A memory leak vulnerability exists in the Linux kernel related to the video device allocation process. Specifically, the e5010_probe() function can lead to memory not being properly released when video_device_alloc() encounters an error. The addition of video_device_release() ensures that allocated memory is effectively freed under failure conditions, mitigating potential resource exhaustion and improving overall system stability.

References