CVE-2025-38549

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths When processing mount options, efivarfs allocates efivarfs_fs_info (sfi) early in fs_context initialization. However, sfi is associated with the superblock and typically freed when the superblock is destroyed. If the fs_context is released (final put) before fill_super is called—such as on error paths or during reconfiguration—the sfi structure would leak, as ownership never transfers to the superblock. Implement the .free callback in efivarfs_context_ops to ensure any allocated sfi is properly freed if the fs_context is torn down before fill_super, preventing this memory leak.

• CWE-401

• https://git.kernel.org/stable/c/64e135f1eaba0bbb0cdee859af3328c68d5b9789Patch
• https://git.kernel.org/stable/c/816d36973467d1c9c08a48bdffe4675e219a2e84Patch
• https://git.kernel.org/stable/c/e9fabe7036bb8be6071f39dc38605508f5f57b20Patch

Published

Aug 16, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38543In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38544In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38545In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38546In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38547In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38548In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-3855A vulnerability was found in CodeCanyon RISE Ultimate Projec…5.3
• CVE-2025-38550In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38551In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38552In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38553Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-38554In the Linux kernel, the following vulnerability has been re…7.8