Riskcovery

CVE-2025-37788

cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path

In the for loop used to allocate the loc_array and bmap for each port, a memory leak is possible when the allocation for loc_array succeeds, but the allocation for bmap fails. This is because when the control flow goes to the label free_eth_finfo, only the allocations starting from (i-1)th iteration are freed.

Fix that by freeing the loc_array in the bmap allocation error path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d915c299f1da68a7dbb43895b8741c7b916c9d08 to before e9de08e15aee35b96064960f95997bb6c1209c4bAffected
  • d915c299f1da68a7dbb43895b8741c7b916c9d08 to before 118d05b530343cd9322607b9719405ba254a4183Affected
  • d915c299f1da68a7dbb43895b8741c7b916c9d08 to before fa2d7708955e4f8212fd69bab1da604e60cb0b15Affected
  • d915c299f1da68a7dbb43895b8741c7b916c9d08 to before 08aa59c0be768596467552c129e9f82166779a67Affected
  • d915c299f1da68a7dbb43895b8741c7b916c9d08 to before dafb6e433ab2333b67be05433dc9c6ccbc7b1284Affected
  • d915c299f1da68a7dbb43895b8741c7b916c9d08 to before 76deedea08899885f076aba0bb80bd1276446822Affected
  • d915c299f1da68a7dbb43895b8741c7b916c9d08 to before 00ffb3724ce743578163f5ade2884374554ca021Affected
LinuxLinux
  • 5.9Affected
  • before 5.9Not affected
  • 5.10.237 through 5.10.*Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.135 through 6.1.*Not affected
  • 6.6.88 through 6.6.*Not affected
  • 6.12.25 through 6.12.*Not affected
  • 6.14.4 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.