Riskcovery

CVE-2025-37757

tipc: fix memory leak in tipc_link_xmit

State
Published
Severity
7.5 High
Published
May 1, 2025
Updated
Oct 15, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tipc: fix memory leak in tipc_link_xmit

In case the backlog transmit queue for system-importance messages is overloaded, tipc_link_xmit() returns -ENOBUFS but the skb list is not purged. This leads to memory leak and failure when a skb is allocated.

This commit fixes this issue by purging the skb list before tipc_link_xmit() returns.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 365ad353c2564bba8835290061308ba825166b3a to before 84895f5ce3829d9fc030e5ec2d8729da4c0c9d08Affected
  • 365ad353c2564bba8835290061308ba825166b3a to before d4d40e437adb376be16b3a12dd5c63f0fa768247Affected
  • 365ad353c2564bba8835290061308ba825166b3a to before ed06675d3b8cd37120b447646d53f7cd3e6fcd63Affected
  • 365ad353c2564bba8835290061308ba825166b3a to before 24e6280cdd7f8d01fc6b9b365fb800c2fb7ea9bbAffected
  • 365ad353c2564bba8835290061308ba825166b3a to before 09c2dcda2c551bba30710c33f6ac678ae7395389Affected
  • 365ad353c2564bba8835290061308ba825166b3a to before 7c5957f7905b4aede9d7a559d271438f3ca9e852Affected
  • 365ad353c2564bba8835290061308ba825166b3a to before d0e02d3d27a0b4dcb13f954f537ca1dd8f282dcfAffected
  • 365ad353c2564bba8835290061308ba825166b3a to before a40cbfbb8f95c325430f017883da669b2aa927d4Affected
  • 365ad353c2564bba8835290061308ba825166b3a to before 69ae94725f4fc9e75219d2d69022029c5b24bc9aAffected
LinuxLinux
  • 4.11Affected
  • before 4.11Not affected
  • 5.4.293 through 5.4.*Not affected
  • 5.10.237 through 5.10.*Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.135 through 6.1.*Not affected
  • 6.6.88 through 6.6.*Not affected
  • 6.12.24 through 6.12.*Not affected
  • 6.13.12 through 6.13.*Not affected
  • 6.14.3 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.