CVE-2025-38390
MEDIUM EPSS 4.9%
Published Jul 25, 202511mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Published Jul 25, 2025 11mo ago
Last Modified Jun 17, 2026 2w ago
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix memory leak by freeing notifier callback node Commit e0573444edbf ("firmware: arm_ffa: Add interfaces to request notification callbacks") adds support for notifier callbacks by allocating and inserting a callback node into a hashtable during registration of notifiers. However, during unregistration, the code only removes the node from the hashtable without freeing the associated memory, resulting in a memory leak. Resolve the memory leak issue by ensuring the allocated notifier callback node is properly freed after it is removed from the hashtable entry.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
4.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-401
Affected Products 6
References 3
- git.kernel.org https://git.kernel.org/stable/c/076fa20b4f5737c34921dbb152f9efceaee571b2
- git.kernel.org https://git.kernel.org/stable/c/938827c440564b2cf2f9b804d1fe81ce8267eded
- git.kernel.org https://git.kernel.org/stable/c/a833d31ad867103ba72a0b73f3606f4ab8601719
Remediation
- git.kernel.org https://git.kernel.org/stable/c/076fa20b4f5737c34921dbb152f9efceaee571b2
- git.kernel.org https://git.kernel.org/stable/c/938827c440564b2cf2f9b804d1fe81ce8267eded
- git.kernel.org https://git.kernel.org/stable/c/a833d31ad867103ba72a0b73f3606f4ab8601719