Bug 2363293 (CVE-2025-37757) - CVE-2025-37757 kernel: tipc: fix memory leak in tipc_link_xmit
Summary: CVE-2025-37757 kernel: tipc: fix memory leak in tipc_link_xmit
Keywords:
Status: NEW
Alias: CVE-2025-37757
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-05-01 14:02 UTC by OSIDB Bzimport
Modified: 2025-05-02 07:02 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-05-01 14:02:34 UTC 
In the Linux kernel, the following vulnerability has been resolved:

tipc: fix memory leak in tipc_link_xmit

In case the backlog transmit queue for system-importance messages is overloaded,
tipc_link_xmit() returns -ENOBUFS but the skb list is not purged. This leads to
memory leak and failure when a skb is allocated.

This commit fixes this issue by purging the skb list before tipc_link_xmit()
returns.
Comment 1 Avinash Hanwate 2025-05-02 04:29:51 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025050139-CVE-2025-37757-8a5e@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.