CVE-2025-37909

MediumCVSS 5.5/10Last modified Nov 10, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: lan743x: Fix memleak issue when GSO enabled

Always map the `skb` to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to EXT descriptor prevents it from being freed, leading to a memory leak

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 23f0703c125be490f70501b6b24ed5645775c56a, < 093855ce90177488eac772de4eefbb909033ce5f; >= 23f0703c125be490f70501b6b24ed5645775c56a, < 6c65ee5ad632eb8dcd3a91cf5dc99b22535f44d9; >= 23f0703c125be490f70501b6b24ed5645775c56a, < df993daa4c968b4b23078eacc248f6502ede8664; >= 23f0703c125be490f70501b6b24ed5645775c56a, < a0e0efbabbbe6a1859bc31bf65237ce91e124b9b; >= 23f0703c125be490f70501b6b24ed5645775c56a, < dae1ce27ceaea7e1522025b15252e3cc52802622; >= 23f0703c125be490f70501b6b24ed5645775c56a, < 189b05f189cac9fd233ef04d31cb5078c4d09c39; >= 23f0703c125be490f70501b6b24ed5645775c56a, < f42c18e2f14c1b1fdd2a5250069a84bc854c398c; >= 23f0703c125be490f70501b6b24ed5645775c56a, < 2d52e2e38b85c8b7bc00dca55c2499f46f8c8198
LinuxLinux4.17
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)>= V3.1.7, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)>= V3.1.6, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)>= V3.1.7, < *

References

Timeline

Published
May 20, 2025
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-37915.3A vulnerability classified as critical was found in symisc UnQLite up to 957c377cb691a4f617db9aba5cc46d90425071e2. This vulnerability affectCVE-2025-379105.5In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations On ACVE-2025-379115.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix out-of-bound memcpy() during ethtool -w When retrieving tCVE-2025-379125.5In the Linux kernel, the following vulnerability has been resolved: ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() As mentionedCVE-2025-379137.8In the Linux kernel, the following vulnerability has been resolved: net_sched: qfq: Fix double list add in class with netem as child qdisc CVE-2025-379147.8In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc CVE-2025-379157.0In the Linux kernel, the following vulnerability has been resolved: net_sched: drr: Fix double list add in class with netem as child qdisc CVE-2025-379167.8In the Linux kernel, the following vulnerability has been resolved: pds_core: remove write-after-free of client_id A use-after-free error CVE-2025-379175.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poCVE-2025-379185.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() A NUCVE-2025-379195.5In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot Update CVE-2025-37927.2A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3. This issue affects some unknown processing of the fi
CVE-2025-37909: Medium severity, CVSS 5.5 | Vulnix