CVE-2025-37909

medium

Description

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the `skb` to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to EXT descriptor prevents it from being freed, leading to a memory leak

References

https://git.kernel.org/stable/c/f42c18e2f14c1b1fdd2a5250069a84bc854c398c

https://git.kernel.org/stable/c/df993daa4c968b4b23078eacc248f6502ede8664

https://git.kernel.org/stable/c/dae1ce27ceaea7e1522025b15252e3cc52802622

https://git.kernel.org/stable/c/a0e0efbabbbe6a1859bc31bf65237ce91e124b9b

https://git.kernel.org/stable/c/2d52e2e38b85c8b7bc00dca55c2499f46f8c8198

https://git.kernel.org/stable/c/189b05f189cac9fd233ef04d31cb5078c4d09c39

Details

Source: Mitre, NVD

Published: 2025-05-20

Updated: 2025-05-21

Risk Information

CVSS v2

Base Score: 4.7

Vector: CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00024