Memory Management Flaw in Linux Kernel Affecting Nouveau Firmware from NVIDIA

CVE-2025-68235

What is CVE-2025-68235?

The Linux kernel contains a vulnerability within the Nouveau firmware component, where the nvkm_falcon_fw::boot memory is allocated but not properly deallocated. This oversight leads to kmemleak warnings, indicating that allocated memory may remain inaccessible and unfreed, causing potential memory leaks. It is crucial for developers to ensure all allocated resources are adequately released to maintain system stability and performance.

References