---
id: CVE-2025-38258
title: >-
  mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on
  write
summary: >-
  In the Linux kernel, the following vulnerability has been resolved:


  mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on
  write


  memcg_path_store() assigns a newly allocated memory buffer to

  filter->memcg_path, witho…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7ee161f18b5da5170b5d6a51aace49d312099128 <
    490a43d07f1663d827e802720d30cbc0494e4f81
  - >-
    Linux >= 7ee161f18b5da5170b5d6a51aace49d312099128 <
    c5d5b0047b0c0f304608f3824139f7bd34c48413
  - >-
    Linux >= 7ee161f18b5da5170b5d6a51aace49d312099128 <
    4a158ac0538dd5695eeaa00aa0720d711f3e4ef1
  - >-
    Linux >= 7ee161f18b5da5170b5d6a51aace49d312099128 <
    4f489fe6afb395dbc79840efa3c05440b760d883
  - Linux 6.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:52:32.042583Z'
published: '2025-07-09'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:02:29.481Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38258'
references:
  - url: 'https://git.kernel.org/stable/c/490a43d07f1663d827e802720d30cbc0494e4f81'
  - url: 'https://git.kernel.org/stable/c/c5d5b0047b0c0f304608f3824139f7bd34c48413'
  - url: 'https://git.kernel.org/stable/c/4a158ac0538dd5695eeaa00aa0720d711f3e4ef1'
  - url: 'https://git.kernel.org/stable/c/4f489fe6afb395dbc79840efa3c05440b760d883'
tags:
  - cve.org
epss: 0.00166
epssPercentile: 0.05828
ingestedAt: '2026-11-05T22:38:31.943Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write

memcg_path_store() assigns a newly allocated memory buffer to
filter->memcg_path, without deallocating the previously allocated and
assigned memory buffer.  As a result, users can leak kernel memory by
continuously writing a data to memcg_path DAMOS sysfs file.  Fix the leak
by deallocating the previously set memory buffer.

## Affected

- `Linux >= 7ee161f18b5da5170b5d6a51aace49d312099128 < 490a43d07f1663d827e802720d30cbc0494e4f81`
- `Linux >= 7ee161f18b5da5170b5d6a51aace49d312099128 < c5d5b0047b0c0f304608f3824139f7bd34c48413`
- `Linux >= 7ee161f18b5da5170b5d6a51aace49d312099128 < 4a158ac0538dd5695eeaa00aa0720d711f3e4ef1`
- `Linux >= 7ee161f18b5da5170b5d6a51aace49d312099128 < 4f489fe6afb395dbc79840efa3c05440b760d883`
- `Linux 6.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.