Threats tagged 'ghsa-cgrx-9qvf-wh88'

CVE-2025-38549 addresses a memory leak vulnerability in the Linux kernel's efivarfs filesystem. The issue occurs when the efivarfs_fs_info structure allocated during fs_context initialization is not freed if the fs_context is released before the fill_super function is called, such as on error paths. This leads to a memory leak because the ownership of the structure never transfers to the superblock, which normally handles its cleanup. The vulnerability has been fixed by implementing a .free callback in efivarfs_context_ops to ensure proper freeing of allocated memory during fs_context teardown.