CVE-2025-38057

espintcp: fix skb leaks

State: Published
Severity: 7.5 High
Published: Jun 18, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

espintcp: fix skb leaks

A few error paths are missing a kfree_skb.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 05db2b850a2b8b17f3d1799f563ea1d550e05ed5Affected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before e2e1f50fc5ebd2826c4e8c558dc65434382d0c0bAffected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before d8d79cf8c2b7475c22f9874eb844bcc80f858b13Affected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 28756f22de48d25256ed89234b66b9037a3f0157Affected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before eb058693dfc93ed7a9c365adb899fedd648b9d9fAffected e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 63c1f19a3be3169e51a5812d22a6d0c879414076Affected
LinuxLinux	5.6Affected before 5.6Not affected 5.15.199 through 5.15.Not affected 6.1.159 through 6.1.Not affected 6.6.117 through 6.6.Not affected 6.12.31 through 6.12.Not affected 6.14.9 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 05db2b850a2b8b17f3d1799f563ea1d550e05ed5Affected
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before e2e1f50fc5ebd2826c4e8c558dc65434382d0c0bAffected
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before d8d79cf8c2b7475c22f9874eb844bcc80f858b13Affected
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 28756f22de48d25256ed89234b66b9037a3f0157Affected
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before eb058693dfc93ed7a9c365adb899fedd648b9d9fAffected
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 63c1f19a3be3169e51a5812d22a6d0c879414076Affected

LinuxLinux

5.6Affected
before 5.6Not affected
5.15.199 through 5.15.*Not affected
6.1.159 through 6.1.*Not affected
6.6.117 through 6.6.*Not affected
6.12.31 through 6.12.*Not affected
6.14.9 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.