Riskcovery

CVE-2025-37909

net: lan743x: Fix memleak issue when GSO enabled

State
Published
Severity
Not scored
Published
May 20, 2025
Updated
Oct 15, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: lan743x: Fix memleak issue when GSO enabled

Always map the `skb` to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to EXT descriptor prevents it from being freed, leading to a memory leak

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 23f0703c125be490f70501b6b24ed5645775c56a to before 093855ce90177488eac772de4eefbb909033ce5fAffected
  • 23f0703c125be490f70501b6b24ed5645775c56a to before 6c65ee5ad632eb8dcd3a91cf5dc99b22535f44d9Affected
  • 23f0703c125be490f70501b6b24ed5645775c56a to before df993daa4c968b4b23078eacc248f6502ede8664Affected
  • 23f0703c125be490f70501b6b24ed5645775c56a to before a0e0efbabbbe6a1859bc31bf65237ce91e124b9bAffected
  • 23f0703c125be490f70501b6b24ed5645775c56a to before dae1ce27ceaea7e1522025b15252e3cc52802622Affected
  • 23f0703c125be490f70501b6b24ed5645775c56a to before 189b05f189cac9fd233ef04d31cb5078c4d09c39Affected
  • 23f0703c125be490f70501b6b24ed5645775c56a to before f42c18e2f14c1b1fdd2a5250069a84bc854c398cAffected
  • 23f0703c125be490f70501b6b24ed5645775c56a to before 2d52e2e38b85c8b7bc00dca55c2499f46f8c8198Affected
LinuxLinux
  • 4.17Affected
  • before 4.17Not affected
  • 5.4.294 through 5.4.*Not affected
  • 5.10.238 through 5.10.*Not affected
  • 5.15.182 through 5.15.*Not affected
  • 6.1.138 through 6.1.*Not affected
  • 6.6.90 through 6.6.*Not affected
  • 6.12.28 through 6.12.*Not affected
  • 6.14.6 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.