Memory Leak Vulnerability in Linux Kernel Affecting Spinand ECC Engine Configuration

CVE-2025-38384

What is CVE-2025-38384?

A memory leak vulnerability in the Linux Kernel affects the ECC engine configuration during the cleanup process of Spinand. Specifically, memory allocated for the ECC engine configuration is not properly released, leading to potential resource exhaustion. This flaw can be observed through kmemleak traces indicating unreferenced memory objects. The issue arises when the spinand_cleanup() function fails to call nanddev_ecc_engine_cleanup(), resulting in the persistent memory allocation. Properly addressing this leak is crucial to maintain the stability and efficiency of systems relying on the Linux Kernel.

References