CVE-2022-49814

CVE-2022-49814 affects the Linux kernel KCM (kernel-based communications) sockets. The issue is a race on sk_receive_queue where the RX path for KCM sockets uses mux->rx_lock to protect more than just the skb queue, but kcm_recvmsg() only reuses the skb queue lock, leaving a window for race co...

CVE-2022-49814 kcm: close race conditions on sk_receive_queue

In the Linux kernel, the following vulnerability has been resolved: kcm: close race conditions on skreceivequeue sk-skreceivequeue is protected by skb queue lock, but for KCM sockets its RX path takes mux-rxlock to protect more than just skb queue. However, kcmrecvmsg still only grabs the skb que...

CVE-2022-49809

CVE-2022-49809 affects the Linux kernel in the x25 subsystem (net/x25). The vulnerability arises in x25_lapb_receive_frame() where skb_copy() is used to obtain a private copy of skb; if the new skb is not freed in the undersized/fragmented skb error handling path, a memory leak occurs. The provid...

CVE-2022-49809

In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix skb leak in x25lapbreceiveframe x25lapbreceiveframe using skbcopy to get a private copy of skb, the new skb should be freed in the undersized/fragmented skb error handling path. Otherwise there is a memory leak...

CVE-2025-37757

In the Linux kernel, the following vulnerability has been resolved: tipc: fix memory leak in tipclinkxmit In case the backlog transmit queue for system-importance messages is overloaded, tipclinkxmit returns -ENOBUFS but the skb list is not purged. This leads to memory leak and failure when a skb...

DEBIAN-CVE-2025-37757

In the Linux kernel, the following vulnerability has been resolved: tipc: fix memory leak in tipclinkxmit In case the backlog transmit queue for system-importance messages is overloaded, tipclinkxmit returns -ENOBUFS but the skb list is not purged. This leads to memory leak and failure when a skb...

CVE-2025-37749

In the Linux kernel, the following vulnerability has been resolved: net: ppp: Add bound checking for skb data on pppsynctxmung Ensure we have enough data in linear buffer from skb before accessing initial bytes. This prevents potential out-of-bounds accesses when processing short packets. When...

UBUNTU-CVE-2025-37757

In the Linux kernel, the following vulnerability has been resolved: tipc: fix memory leak in tipclinkxmit In case the backlog transmit queue for system-importance messages is overloaded, tipclinkxmit returns -ENOBUFS but the skb list is not purged. This leads to memory leak and failure when a skb...

CVE-2025-37795

Removed by vendor...

CVE-2025-37795

...

CVE-2025-37795

CVE-2025-37795 is rejected/not used per the CVE entry; not an active vulnerability.

CVE-2025-37757

In CVE-2025-37757, the Linux kernel leak was in tipc_link_xmit where an overloaded backlog transmit queue could cause -ENOBUFS but leave skb lists uncleared, leading to memory leaks during skb allocations. The fix purges the skb list before tipc_link_xmit() returns.

CVE-2025-37757 tipc: fix memory leak in tipc_link_xmit

In the Linux kernel, the following vulnerability has been resolved: tipc: fix memory leak in tipclinkxmit In case the backlog transmit queue for system-importance messages is overloaded, tipclinkxmit returns -ENOBUFS but the skb list is not purged. This leads to memory leak and failure when a skb...

CVE-2025-37757 tipc: fix memory leak in tipc_link_xmit

In the Linux kernel, the following vulnerability has been resolved: tipc: fix memory leak in tipclinkxmit In case the backlog transmit queue for system-importance messages is overloaded, tipclinkxmit returns -ENOBUFS but the skb list is not purged. This leads to memory leak and failure when a skb...

CVE-2025-37749

In the Linux kernel, the following vulnerability has been resolved: net: ppp: Add bound checking for skb data on pppsynctxmung Ensure we have enough data in linear buffer from skb before accessing initial bytes. This prevents potential out-of-bounds accesses when processing short packets. When...

PT-2025-18526 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the net/x25 component. The x25 lapb receive frame function uses skb copy to obtain a private copy of skb...

PT-2025-18531 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition issue has been resolved in the Linux kernel related to KCM sockets. The sk-sk receive queue is protected by the skb queue lock, but for KCM sockets, the RX path takes...

PT-2025-18639 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential memory leak has been resolved in the Linux kernel. The issue occurs in the nfcmrvl i2c nci send function, which is called by nfcmrvl nci send. The skb should be freed in...

PT-2025-18589 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the net: gso module. The issue occurs when the gso size of a GRO packet is changed, and the frag list contains skbs wi...

PT-2025-18638 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use after free issue has been resolved in the Linux kernel's networking scheduler. The problem occurs because the skb cannot be used again after it is passed to qdisc enqueue. This f...