Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-37909

net: lan743x: Fix memleak issue when GSO enabled

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.294, 5.10.238, 5.15.182, 6.1.138, 6.6.90, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the `skb` to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to EXT descriptor prevents it from being freed, leading to a memory leak

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 23f0703c125be490f70501b6b24ed5645775c56a · fixed in 093855ce90177488eac772de4eefbb909033ce5f; From 23f0703c125be490f70501b6b24ed5645775c56a · fixed in 6c65ee5ad632eb8dcd3a91cf5dc99b22535f44d9; From 23f0703c125be490f70501b6b24ed5645775c56a · fixed in df993daa4c968b4b23078eacc248f6502ede8664; From 23f0703c125be490f70501b6b24ed5645775c56a · fixed in a0e0efbabbbe6a1859bc31bf65237ce91e124b9b; From 23f0703c125be490f70501b6b24ed5645775c56a · fixed in dae1ce27ceaea7e1522025b15252e3cc52802622; From 23f0703c125be490f70501b6b24ed5645775c56a · fixed in 189b05f189cac9fd233ef04d31cb5078c4d09c39; From 23f0703c125be490f70501b6b24ed5645775c56a · fixed in f42c18e2f14c1b1fdd2a5250069a84bc854c398c; From 23f0703c125be490f70501b6b24ed5645775c56a · fixed in 2d52e2e38b85c8b7bc00dca55c2499f46f8c8198

  • Linux Linux

    4.17

  • KernelLinux

    From 4.17.0 · fixed in 5.4.294; From 5.5.0 · fixed in 5.10.238; From 5.11.0 · fixed in 5.15.182; From 5.16.0 · fixed in 6.1.138; From 6.2.0 · fixed in 6.6.90; From 6.7.0 · fixed in 6.12.28; From 6.13.0 · fixed in 6.14.6

References 8

git.kernel.org