CVE-2025-38076

In the Linux kernel, the following vulnerability has been resolved: alloc_tag: allocate percpu counters for module tags dynamically When a module gets unloaded it checks whether any of its tags are still in use and if so, we keep the memory containing module's allocation tags alive until all tags are unused. However percpu counters referenced by the tags are freed by free_module(). This will lead to UAF if the memory allocated by a module is accessed after module was unloaded. To fix this we allocate percpu counters for module allocation tags dynamically and we keep it alive for tags which are still in use after module unloading. This also removes the requirement of a larger PERCPU_MODULE_RESERVE when memory allocation profiling is enabled because percpu memory for counters does not need to be reserved anymore.

• CWE-416

• https://git.kernel.org/stable/c/12ca42c237756182aad8ab04654c952765cb9061Patch
• https://git.kernel.org/stable/c/3cc733e6d96c938d2b82be96858a0ab900eb6fdcPatch

Published

Jun 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38070In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38071In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38072In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38073Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-38074In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38075In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38077In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38078In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2025-38079In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-3808A vulnerability has been found in zhenfeng13 My-BBS 1.0 and …6.5
• CVE-2025-38080In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38081In the Linux kernel, the following vulnerability has been re…7.1