REDHAT-BUG-2383399: Low severity Linux Linux kernel (nvmet) vulnerability

Published Jul 25, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix memory leak of bio integrity

If nvmet receives commands with metadata there is a continuous memory leak of kmalloc-128 slab or more precisely bio->biintegrity.

Since commit bf4c89fc8797 ("block: don't call biouninit from bioendio") each user of bioinit has to use biouninit as well. Otherwise the bio integrity is not getting free. Nvmet uses bioinit for inline bios.

Uninit the inline bio to complete deallocation of integrity in bio.

Affected Software

1 affected component

Linux Linux kernel (nvmet)

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Linux kernel nvmet to a version that resolves this vulnerability.
Patch nvmet: fix memory leak of bio integrity
Compensating control
Update Linux kernel so nvmet that receives commands with metadata no longer leaks memory due to bio->bi_integrity not being freed; apply the fix identified as "nvmet: fix memory leak of bio integrity".

Event History

Jul 25, 2025

Data Sourced

via Red Hat·02:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2383399?

The severity of REDHAT-BUG-2383399 is classified as low.

What does REDHAT-BUG-2383399 affect?

REDHAT-BUG-2383399 affects the Linux kernel specifically related to nvmet.

How do I fix REDHAT-BUG-2383399?

To fix REDHAT-BUG-2383399, ensure you apply the latest updates or patches to the Linux kernel that address this memory leak.

What is the nature of the vulnerability in REDHAT-BUG-2383399?

The nature of the vulnerability in REDHAT-BUG-2383399 is a continuous memory leak occurring when nvmet processes commands with metadata.

When was REDHAT-BUG-2383399 published?

REDHAT-BUG-2383399 was published on July 25, 2025.