Riskcovery

CVE-2025-39834

net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow

State
Published
Severity
5.5 Medium
Published
Sep 16, 2025
Updated
Oct 21, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow

When an invalid stc_type is provided, the function allocates memory for shared_stc but jumps to unlock_and_out without freeing it, causing a memory leak.

Fix by jumping to free_shared_stc label instead to ensure proper cleanup.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 504e536d90104c850731840d3fbc95acf251f11b to before a2751e1af5dc8b1a64cfd463576c58617c2573acAffected
  • 504e536d90104c850731840d3fbc95acf251f11b to before 051fd8576a2e4e95d5870c5c9f8679c5b16882e4Affected
  • 504e536d90104c850731840d3fbc95acf251f11b to before a630f83592cdad1253523a1b760cfe78fef6cd9cAffected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.16.5 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.