Riskcovery

CVE-2025-39830

net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path

State
Published
Severity
5.5 Medium
Published
Sep 16, 2025
Updated
Oct 21, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path

In the error path of hws_pool_buddy_init(), the buddy allocator cleanup doesn't free the allocator structure itself, causing a memory leak.

Add the missing kfree() to properly release all allocated memory.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • c61afff94373641695cc81999e9bb10408ea84d5 to before 4ccdbf50dd88a2a7399409e68887dd8077f6a562Affected
  • c61afff94373641695cc81999e9bb10408ea84d5 to before 86d13a6f49cb68aa91bd718b1b627e72e77285c1Affected
  • c61afff94373641695cc81999e9bb10408ea84d5 to before 2c0a959bebdc1ada13cf9a8242f177c5400299e6Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.16.5 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.