CVE-2025-38057: falha de alta gravidade em Linux
espintcp: fix skb leaks
Publicada em · Atualizada em
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.5%
probabilidade de exploração
0.5%top 61% das CVEs
exploração observada
nãonenhuma fonte reporta
In the Linux kernel, the following vulnerability has been resolved:
espintcp: fix skb leaks
A few error paths are missing a kfree_skb.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Linux · LinuxCVEs relacionadas — Linux
No mesmo produto, das mais perigosas para as menos.
CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2025-39964HIGHcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgEPSS 1.4%KEV
Referências
https://git.kernel.org/stable/c/05db2b850a2b8b17f3d1799f563ea1d550e05ed5https://git.kernel.org/stable/c/28756f22de48d25256ed89234b66b9037a3f0157https://git.kernel.org/stable/c/63c1f19a3be3169e51a5812d22a6d0c879414076https://git.kernel.org/stable/c/d8d79cf8c2b7475c22f9874eb844bcc80f858b13https://git.kernel.org/stable/c/e2e1f50fc5ebd2826c4e8c558dc65434382d0c0bhttps://git.kernel.org/stable/c/eb058693dfc93ed7a9c365adb899fedd648b9d9f