Memory Leak in Linux Kernel's Iris Media Component

CVE-2025-40017

What is CVE-2025-40017?

A memory leak vulnerability exists in the Linux kernel's Iris media component due to an internal buffer not being freed during session closure. This untracked buffer, allocated each session, does not release memory, leading to potential system resource exhaustion. To remedy this, logic has been introduced to ensure that the internal buffer is explicitly freed at the end of each session, thus allowing for proper memory management and optimization within the Linux environment.

References