Memory Management Flaw in Linux Kernel Affects Multiple Systems

CVE-2025-38490

What is CVE-2025-38490?

A flaw in Linux kernel's memory management was identified that allows for a double free of memory pages when the page_pool_put_full_page() function is invoked incorrectly. This vulnerability can lead to kernel panic and system instability. The original implementation erroneously called this function during scenarios not intended for memory release, thus causing potential system crashes. Proper invocation is essential for maintaining kernel integrity and performance.

References