CVE-2025-37908

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-37908
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37908.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-37908
Downstream
Published
2025-05-20T15:21:41.121Z
Modified
2025-11-27T02:32:47.720927Z
Summary
mm, slab: clean up slab->obj_exts always
Details

In the Linux kernel, the following vulnerability has been resolved:

mm, slab: clean up slab->obj_exts always

When memory allocation profiling is disabled at runtime or due to an error, shutdownmemprofiling() is called: slab->objexts which previously allocated remains. It won't be cleared by unaccountslab() because of memallocprofilingenabled() not true. It's incorrect, slab->objexts should always be cleaned up in unaccount_slab() to avoid following error:

[...]BUG: Bad page state in process... .. [...]page dumped because: page still charged to cgroup

[andriy.shevchenko@linux.intel.com: fold needslabobj_ext() into its only user]

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/blob/cc431b3424123d84bcd7afd4de150b33f117a8ef/cves/2025/37xxx/CVE-2025-37908.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
21c690a349baab895dc68ab70d291e1598d7109d
Fixed
dab2a13059a475b6392550f882276e170fe2fcff
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
21c690a349baab895dc68ab70d291e1598d7109d
Fixed
01db0e1a48345aa1937f3bdfc7c7108d03ebcf7e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
21c690a349baab895dc68ab70d291e1598d7109d
Fixed
be8250786ca94952a19ce87f98ad9906448bc9ef

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.10.0
Fixed
6.12.28
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.6