Description
In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the `skb` to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to EXT descriptor prevents it from being freed, leading to a memory leak
References (10)
Scores
CVSS v3
5.5
EPSS
0.0010
EPSS Percentile
28.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-401
Status
published
Products (10)
debian/debian_linux
11.0
linux/Kernel
4.17.0 - 5.4.294linux
linux/Kernel
5.11.0 - 5.15.182linux
linux/Kernel
5.16.0 - 6.1.138linux
linux/Kernel
5.5.0 - 5.10.238linux
linux/Kernel
6.13.0 - 6.14.6linux
linux/Kernel
6.2.0 - 6.6.90linux
linux/Kernel
6.7.0 - 6.12.28linux
linux/linux_kernel
6.15 rc1 (4 CPE variants)
linux/linux_kernel
4.17 - 5.4.294
Published
May 20, 2025
Tracked Since
Feb 18, 2026