CVE-2025-38057high

CVE-2025-38057: high-severity vulnerability in Linux

espintcp: fix skb leaks

Published · Updated

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.5%
exploitation probability
0.5%top 61% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved: espintcp: fix skb leaks A few error paths are missing a kfree_skb.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Linux · Linux
Related CVEs — Linux

In the same product, most dangerous first.

CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2025-39964HIGHcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgEPSS 1.4%KEV
References
https://git.kernel.org/stable/c/05db2b850a2b8b17f3d1799f563ea1d550e05ed5https://git.kernel.org/stable/c/28756f22de48d25256ed89234b66b9037a3f0157https://git.kernel.org/stable/c/63c1f19a3be3169e51a5812d22a6d0c879414076https://git.kernel.org/stable/c/d8d79cf8c2b7475c22f9874eb844bcc80f858b13https://git.kernel.org/stable/c/e2e1f50fc5ebd2826c4e8c558dc65434382d0c0bhttps://git.kernel.org/stable/c/eb058693dfc93ed7a9c365adb899fedd648b9d9f