Memory Leak Vulnerability in Linux Kernel Affecting Memory Control Groups

CVE-2025-38258

What is CVE-2025-38258?

A memory leak vulnerability in the Linux kernel allows users to leak kernel memory through improper handling of allocated buffers in the memory control group (memcg) path. When users write data continuously to the memcg_path file in the DAMON sysfs interface, previously allocated memory buffers are not properly deallocated, leading to an increased risk of memory leaks. The affected function, memcg_path_store(), fails to free old buffers when new data is assigned, which could be exploited to compromise system memory and stability.

References