{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"490a43d07f1663d827e802720d30cbc0494e4f81","status":"affected","version":"7ee161f18b5da5170b5d6a51aace49d312099128","versionType":"git"},{"lessThan":"c5d5b0047b0c0f304608f3824139f7bd34c48413","status":"affected","version":"7ee161f18b5da5170b5d6a51aace49d312099128","versionType":"git"},{"lessThan":"4a158ac0538dd5695eeaa00aa0720d711f3e4ef1","status":"affected","version":"7ee161f18b5da5170b5d6a51aace49d312099128","versionType":"git"},{"lessThan":"4f489fe6afb395dbc79840efa3c05440b760d883","status":"affected","version":"7ee161f18b5da5170b5d6a51aace49d312099128","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.3"},{"lessThan":"6.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.96","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.36","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2025-38258","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write\n\nmemcg_path_store() assigns a newly allocated memory buffer to\nfilter->memcg_path, without deallocating the previously allocated and\nassigned memory buffer.  As a result, users can leak kernel memory by\ncontinuously writing a data to memcg_path DAMOS sysfs file.  Fix the leak\nby deallocating the previously set memory buffer.","epss":{"date":"2026-11-05","percentile":0.05846,"score":0.00166},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793912549481,"publishedAt":1752057755000,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/490a43d07f1663d827e802720d30cbc0494e4f81"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/c5d5b0047b0c0f304608f3824139f7bd34c48413"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/4a158ac0538dd5695eeaa00aa0720d711f3e4ef1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/4f489fe6afb395dbc79840efa3c05440b760d883"}],"remediation":[],"revision":"fa83ea7c8fc5192d9ad063b02661e6e6bc5a1e0daf3f7ae643c8df16310294fe","sources":[{"modifiedAt":1793912549481,"name":"CNA: Linux","retrievedAt":1793913629448,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38258"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913633528,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38258"}],"ssvc":{"assessedAt":1793911952042,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write","updatedAt":1793913633528}