CVE-2025-38405

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet receives commands with metadata there is a continuous memory leak of kmalloc-128 slab or more precisely bio->bi_integrity. Since commit bf4c89fc8797 ("block: don't call bio_uninit from bio_endio") each user of bio_init has to use bio_uninit as well. Otherwise the bio integrity is not getting free. Nvmet uses bio_init for inline bios. Uninit the inline bio to complete deallocation of integrity in bio.

• CWE-401

• https://git.kernel.org/stable/c/190f4c2c863af7cc5bb354b70e0805f06419c038Patch
• https://git.kernel.org/stable/c/2e2028fcf924d1c6df017033c8d6e28b735a0508Patch
• https://git.kernel.org/stable/c/431e58d56fcb5ff1f9eb630724a922e0d2a941dfPatch

Published

Jul 25, 2025

Last Modified

Jul 30, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-3840An improper neutralization of input vulnerability was identi…2.1
• CVE-2025-38400In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38401In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38402In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38403In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38404In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38406In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38407In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38408In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38409In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3841A vulnerability, which was classified as problematic, was fo…9.8
• CVE-2025-38410In the Linux kernel, the following vulnerability has been re…5.5