CVE-2025-37908 Details
Description
In the Linux kernel, the following vulnerability has been resolved: mm, slab: clean up slab->obj_exts always When memory allocation profiling is disabled at runtime or due to an error, shutdown_mem_profiling() is called: slab->obj_exts which previously allocated remains. It won't be cleared by unaccount_slab() because of mem_alloc_profiling_enabled() not true. It's incorrect, slab->obj_exts should always be cleaned up in unaccount_slab() to avoid following error: [...]BUG: Bad page state in process... .. [...]page dumped because: page still charged to cgroup [[email protected]: fold need_slab_obj_ext() into its only user]
A vulnerability in the Linux kernel's memory management system has been addressed. The issue arose because the 'obj_exts' field in the slab allocator was not properly cleared when memory allocation profiling was disabled. This oversight could lead to errors, as the page state remained incorrectly charged to a control group. The problem has been fixed by ensuring that 'obj_exts' is always cleaned up, preventing the associated page state errors.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/01db0e1a48345aa1937f3bdfc7c7108d03ebcf7e | kernel.org | Patch |
| https://git.kernel.org/stable/c/be8250786ca94952a19ce87f98ad9906448bc9ef | kernel.org | Patch |
| https://git.kernel.org/stable/c/dab2a13059a475b6392550f882276e170fe2fcff | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-459 | Incomplete Cleanup | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.10, < 6.12.28 >= 6.13, < 6.14.6 6.15 rc1 6.15 rc2 6.15 rc3 6.15 rc4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 30, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 17, 2025 | Initial Analysis | [email protected] |
| May 20, 2025 | New CVE Received | kernel.org |