Memory Leak in Linux Kernel's Remote Processor Handling

CVE-2025-38418

What is CVE-2025-38418?

A memory leak vulnerability exists in the Linux kernel's management of remote processors. When the function rproc_attach() is called, if rproc_handle_resources() fails, it does not properly release the clean_table associated with the remote processor. This oversight can lead to unreferenced memory allocations, ultimately causing resource exhaustion in the kernel. The failure to manage memory effectively can impact system stability and performance, particularly in environments relying heavily on remote processors.

References