Memory Leak in Linux Kernel Affects ARM Firmware Notifier Callbacks

CVE-2025-38390

What is CVE-2025-38390?

A memory leak exists in the Linux kernel's ARM firmware subsystem due to improper management of notifier callback nodes. During the registration of notifiers, a callback node is added to a hashtable, but when the notifier is unregistered, the associated memory for the callback node is not freed. This oversight could lead to increased memory consumption over time, ultimately affecting system performance. The issue has been addressed in a patch that ensures proper deallocation of the memory associated with the callback node upon unregistration.

References