File Descriptor Management Flaw in Linux Kernel Affects Multiple Versions

CVE-2025-38409

What is CVE-2025-38409?

A vulnerability has been identified in the Linux kernel concerning the improper handling of file descriptors in the drm/msm subsystem. The issue arises when the put_unused_fd() function is executed without properly freeing the associated file when a file descriptor is already installed via fd_install(). This flaw can potentially lead to resource leaks, affecting system performance and stability. A patch addressing this vulnerability has been released, ensuring that unused file descriptors are handled correctly, thereby enhancing system security and reliability.

References