CVE-2025-40017

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: iris: Fix memory leak by freeing untracked persist buffer

One internal buffer which is allocated only once per session was not being freed during session close because it was not being tracked as part of internal buffer list which resulted in a memory leak.

Add the necessary logic to explicitly free the untracked internal buffer during session close to ensure all allocated memory is released properly.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 73702f45db81b74897b2808aaa13484826156006, < c9e024e907cafafd6b094f69a0d0f5d18fd28876; >= 73702f45db81b74897b2808aaa13484826156006, < ec2f87ad035e8d1ad67567542842f1f23a4dbde2; >= 73702f45db81b74897b2808aaa13484826156006, < 02a24f13b3a1d9da9f3de56aa5fdb7cc1fe167a2
LinuxLinux6.15

References

Timeline

Published
Oct 20, 2025
Last modified
Oct 19, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-400187.8In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleCVE-2025-40019In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption MovCVE-2025-40025.5A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB and classified as problematic. Affected by this issue is the function GetDeCVE-2025-40020In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix shift-out-of-bounds issue Explicitly uses a 64-bit CVE-2025-40021In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynaCVE-2025-40022In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx Commit 1b3CVE-2025-40023In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't expose sysfs attributes not applicable for VFs VFs caCVE-2025-400247.8In the Linux kernel, the following vulnerability has been resolved: vhost: Take a reference on the task in struct vhost_task. vhost_task_cCVE-2025-400257.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer for non inode dnode As syzCVE-2025-400267.9In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O CVE-2025-400277.8In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9_fd_cancelled Syzkaller reports a KASACVE-2025-400287.8In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a
CVE-2025-40017: Unscored | Vulnix