CVE-2025-38057: fallo de gravedad alta en Linux
espintcp: fix skb leaks
Publicada el · Actualizada el
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.5epss 0.5%
probabilidad de explotación
0.5%top 61% de las CVE
explotación observada
noninguna fuente lo reporta
In the Linux kernel, the following vulnerability has been resolved:
espintcp: fix skb leaks
A few error paths are missing a kfree_skb.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
Linux · LinuxCVEs relacionadas — Linux
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2025-39964HIGHcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgEPSS 1.4%KEV
Referencias
https://git.kernel.org/stable/c/05db2b850a2b8b17f3d1799f563ea1d550e05ed5https://git.kernel.org/stable/c/28756f22de48d25256ed89234b66b9037a3f0157https://git.kernel.org/stable/c/63c1f19a3be3169e51a5812d22a6d0c879414076https://git.kernel.org/stable/c/d8d79cf8c2b7475c22f9874eb844bcc80f858b13https://git.kernel.org/stable/c/e2e1f50fc5ebd2826c4e8c558dc65434382d0c0bhttps://git.kernel.org/stable/c/eb058693dfc93ed7a9c365adb899fedd648b9d9f