Threats tagged 'ghsa-5g8h-g27f-mh64'

CVE-2025-38405 is a medium-severity vulnerability in the Linux kernel's nvmet subsystem that causes a memory leak related to bio integrity when commands with metadata are received. The issue arises because bio integrity structures are not properly freed due to missing bio_uninit calls after bio_init usage. This flaw can lead to continuous memory consumption, potentially impacting system availability.