CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled
In the Linux kernel, the following vulnerability has been resolved:
net: lan743x: Fix memleak issue when GSO enabled
Always map the skb to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to EXT descriptor prevents it from being freed, leading to a memory leak
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure the fix for the lan743x memleak issue applies when GSO is enabled; the resolution is described as mapping skb to the EXT descriptor when the number of fragments is zero to prevent skb being freed and causing a memory leak.
Linux kernel (net: lan743x) GSO enabled = enabled/disabled not specified
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37909?
CVE-2025-37909 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-37909?
To fix CVE-2025-37909, users should update their Linux kernel to the latest version that has addressed this vulnerability.
What are the potential impacts of CVE-2025-37909?
The potential impacts of CVE-2025-37909 include memory leakage when Generic Segmentation Offload (GSO) is enabled.
Which versions of the Linux kernel are affected by CVE-2025-37909?
CVE-2025-37909 affects specific versions of the Linux kernel that utilize the lan743x driver.
When was CVE-2025-37909 discovered?
CVE-2025-37909 was discovered and documented in the Linux kernel's ongoing security updates.