CVE-2025-39834: net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: HWS, Fix memory leak in hwsactiongetsharedstcnic error flow
When an invalid stctype is provided, the function allocates memory for sharedstc but jumps to unlockandout without freeing it, causing a memory leak.
Fix by jumping to freesharedstc label instead to ensure proper cleanup.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39834?
CVE-2025-39834 has a high severity level due to the potential memory leak which could affect system performance.
How do I fix CVE-2025-39834?
To fix CVE-2025-39834, you should update to the latest version of the Linux kernel that contains the relevant patch.
What systems are affected by CVE-2025-39834?
CVE-2025-39834 affects various versions of the Linux kernel where the memory leak in the mlx5 driver is present.
What impact does CVE-2025-39834 have on security?
CVE-2025-39834 may lead to resource exhaustion, impacting the stability and availability of the affected systems.
Is there a workaround for CVE-2025-39834?
There are no known workarounds for CVE-2025-39834, so applying the kernel update is the recommended approach.