mm/damon/sysfs: dealloc commit test ctx always

{
  "id": "589a9cc221f84907f8f8b83e48f015d9f97cc878b7e25842f50e840e34a01242",
  "url": "https://osv.dev/vulnerability/CVE-2025-40227",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "mm/damon/sysfs: dealloc commit test ctx always",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: dealloc commit test ctx always The damon_ctx for testing online DAMON parameters commit inputs is deallocated only when the test fails. This means memory is leaked for every successful online DAMON parameters commit. Fix the leak by always deallocating it.",
    "evidence": "osv:CVE-2025-40227",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.17.6",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2025-40227",
      "aliases": [
        "CVE-2025-40227"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "4c9ea539ad59ec60676930dacee02b7adde2e0c0"
                },
                {
                  "fixed": "ba236520ae53418859f4b7c7de3c71478d3c0b5a"
                },
                {
                  "fixed": "139e7a572af0b45f558b5e502121a768dc328ba8"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40227.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.15.0"
                },
                {
                  "fixed": "6.17.6"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40227.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:51.100672144Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/139e7a572af0b45f558b5e502121a768dc328ba8",
        "https://git.kernel.org/stable/c/ba236520ae53418859f4b7c7de3c71478d3c0b5a",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40227.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-40227",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40227.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-40227",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 519925,
  "published_at": "2025-12-04T15:31:18.839+00:00"
}