Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netrom: Fixed a memory leak in nrsendmsg. syzbot reported a memory leak 1. When the function sockallocsendskb returns NULL in nroutput, the original skb is not freed. This skb was allocated in nrsendmsg. This issue was fixed b...

CVE-2025-68787

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nrsendmsg syzbot reported a memory leak 1. When function sockallocsendskb return NULL in nroutput, the original skb is not freed, which was allocated in nrsendmsg. Fix this by freeing it before return. ...

CVE-2025-68787

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nrsendmsg syzbot reported a memory leak 1. When function sockallocsendskb return NULL in nroutput, the original skb is not freed, which was allocated in nrsendmsg. Fix this by freeing it before return. ...

CVE-2025-68787

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nrsendmsg syzbot reported a memory leak 1. When function sockallocsendskb return NULL in nroutput, the original skb is not freed, which was allocated in nrsendmsg. Fix this by freeing it before return. ...

CVE-2025-68787

The CVE-2025-68787 entry documents a memory-leak vulnerability in the Linux kernel’s netrom path, specifically when nr_sendmsg() invokes sock_alloc_send_skb() and nr_output() returns NULL. The root cause is that the original skb allocated in nr_sendmsg() is not freed before the error return. This...

CVE-2025-68787 netrom: Fix memory leak in nr_sendmsg()

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nrsendmsg syzbot reported a memory leak 1. When function sockallocsendskb return NULL in nroutput, the original skb is not freed, which was allocated in nrsendmsg. Fix this by freeing it before return. ...

Linux Distros Unpatched Vulnerability : CVE-2025-68787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netrom: Fix memory leak in nrsendmsg syzbot reported a memory leak 1. When function sockallocsendskb return NULL in nroutput, the original skb is not freed, whi...

CVE-2025-21758

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU protection to mldnewpack mldnewpack can be called without RTNL or RCU being held. Note that we no longer can use sockallocsendskb because ipv6.igmpsk uses GFPKERNEL allocations which can sleep. Instead use...

CVE-2025-21758

CVE-2025-21758 is a Linux kernel vulnerability in the IPv6 multicast path. The issue: mld_newpack() could be called without RTNL or RCU being held, which may lead to unsafe access. The fix replaces sock_alloc_send_skb() (which uses GFP_KERNEL and can sleep) with alloc_skb() and charges the net-&g...