CVE-2025-21788: net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases
If the XDP program doesn't result in XDPPASS then we leak the memory allocated by am65cpswbuildskb().
It is pointless to allocate SKB memory before running the XDP program as we would be wasting CPU cycles for cases other than XDPPASS. Move the SKB allocation after evaluating the XDP program result.
This fixes the memleak. A performance boost is seen for XDPDROP test.
XDPDROP test: Before: 460256 rx/s 0 err/s After: 784130 rx/s 0 err/s
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21788?
CVE-2025-21788 has been classified with a severity level that indicates it can lead to memory leaks in specific scenarios involving XDP programs in the Linux kernel.
How do I fix CVE-2025-21788?
To address CVE-2025-21788, update your Linux kernel to the latest version where this vulnerability has been patched.
Which systems are affected by CVE-2025-21788?
CVE-2025-21788 affects the Linux kernel, particularly in cases involving Ethernet handling with the am65-cpsw driver.
What does CVE-2025-21788 impact in the Linux kernel?
CVE-2025-21788 impacts memory management, specifically memory leakage associated with the handling of XDP programs.
Is CVE-2025-21788 an exploit risk?
While CVE-2025-21788 may lead to resource depletion due to memory leaks, it does not directly indicate an exploit risk without further context.