CVE-2025-38148

Summary

In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when using one step timestamping Fix memory leak when running one-step timestamping. When running one-step sync timestamping, the HW is configured to insert the TX time into the frame, so there is no reason to keep the skb anymore. As in this case the HW will never generate an interrupt to say that the frame was timestamped, then the frame will never released. Fix this by freeing the frame in case of one-step timestamping.

Impact & exploitability

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products we track (2)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: https://git.kernel.org/stable/c/0b40aeaf83ca04d4c9801e235b7533400c8b5f17 ↗

Additional information

• NVD record
• https://git.kernel.org/stable/c/0b40aeaf83ca04d4c9801e235b7533400c8b5f17Patch
• https://git.kernel.org/stable/c/24b24295464f25fb771d36ed558c7cd942119361Patch
• https://git.kernel.org/stable/c/66abe22017522dd56b820e41ca3a5b131a637001Patch
• https://git.kernel.org/stable/c/846992645b25ec4253167e3f931e4597eb84af56Patch
• https://git.kernel.org/stable/c/cdbabd316c5a4a9b0fda6aafe491e2db17fbb95dPatch
• https://git.kernel.org/stable/c/db2a12ddd3a31f668137ff6a4befc1343c79cbc4Patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlAdvisory