In the Linux kernel, the following vulnerability has been resolved:
efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths
When processing mount options, efivarfs allocates efivarfs_fs_info (sfi) early in fs_context initialization. However, sfi is associated with the superblock and typically freed when the superblock is destroyed. If the fs_context is released (final put) before fill_super is called—such as on error paths or during reconfiguration—the sfi structure would leak, as ownership never transfers to the superblock.
Implement the .free callback in efivarfs_context_ops to ensure any allocated sfi is properly freed if the fs_context is torn down before fill_super, preventing this memory leak.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade kernel6.12-libbpf-develUpgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-tools-develUpgrade python3-perf6.12Upgrade kernel6.12-devel | Oct 16, 2025 | Aug 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kernel-sourceUpgrade dtb-renesasUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-default | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-generic-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidiaUpgrade linux-image-kvmUpgrade linux-image-aws-64k-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-raspi-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-gke-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-aws-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub