Memory Leak Vulnerability in Linux Kernel's efivarfs Module

CVE-2025-38549

What is CVE-2025-38549?

The efivarfs module in the Linux kernel has a memory leak issue where the efivarfs_fs_info structure is not properly freed during error handling paths. This occurs when mount options are processed and the fs_context is released before fill_super is executed. As a result, the allocated efivarfs_fs_info structure remains in memory, leading to resource leaks. A fix has been implemented to ensure that any allocated structures are freed appropriately if the fs_context is torn down prematurely, thereby enhancing the stability and performance of the system.

References