CVE-2025-38057
HIGH severity · CVSS 7.5 · CWE-401
7.5CVSS HIGH
Summary
In the Linux kernel, the following vulnerability has been resolved: espintcp: fix skb leaks A few error paths are missing a kfree_skb.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Official patch: https://git.kernel.org/stable/c/05db2b850a2b8b17f3d1799f563ea1d550e05ed5 ↗
Additional information
- NVD record
- https://git.kernel.org/stable/c/05db2b850a2b8b17f3d1799f563ea1d550e05ed5Patch
- https://git.kernel.org/stable/c/28756f22de48d25256ed89234b66b9037a3f0157Patch
- https://git.kernel.org/stable/c/63c1f19a3be3169e51a5812d22a6d0c879414076Patch
- https://git.kernel.org/stable/c/d8d79cf8c2b7475c22f9874eb844bcc80f858b13Patch
- https://git.kernel.org/stable/c/e2e1f50fc5ebd2826c4e8c558dc65434382d0c0bPatch
- https://git.kernel.org/stable/c/eb058693dfc93ed7a9c365adb899fedd648b9d9fPatch