CVE-2025-39830: net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: HWS, Fix memory leak in hwspoolbuddyinit error path
In the error path of hwspoolbuddyinit(), the buddy allocator cleanup doesn't free the allocator structure itself, causing a memory leak.
Add the missing kfree() to properly release all allocated memory.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39830?
CVE-2025-39830 is classified as a medium-severity vulnerability due to its potential to cause memory leaks in the Linux kernel.
How do I fix CVE-2025-39830?
To fix CVE-2025-39830, update your Linux kernel to the latest stable version where the memory leak has been resolved.
What systems are affected by CVE-2025-39830?
CVE-2025-39830 affects certain versions of the Linux kernel, specifically those utilizing the net/mlx5 networking driver.
What does CVE-2025-39830 affect in the Linux kernel?
CVE-2025-39830 affects the hws_pool_buddy_init function in the Linux kernel, which is responsible for memory allocation.
Are there any known exploits for CVE-2025-39830?
As of now, there are no publicly known exploits specifically targeting CVE-2025-39830.