CVE-2025-37982

MEDIUM

Linux kernel - Memory Corruption

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work The skb dequeued from tx_queue is lost when wl1251_ps_elp_wakeup fails with a -ETIMEDOUT error. Fix that by queueing the skb back to tx_queue.

References (9)

[Patch] https://git.kernel.org/stable/c/13c9744c1bcdb5de4e7dc1a78784788ecec52add

[Patch] https://git.kernel.org/stable/c/2996144be660d930d5e394652abe08fe89dbe00e

[Patch] https://git.kernel.org/stable/c/4a43fd36710669d67dbb5c16287a58412582ca26

[Patch] https://git.kernel.org/stable/c/52f224009ce1e44805e6ff3ffc2a06af9c1c3c5b

[Patch] https://git.kernel.org/stable/c/5a90c29d0204c5ffc45b43b4eced6eef0e19a33a

[Patch] https://git.kernel.org/stable/c/8fd4b9551af214d037fbc9d8e179840b8b917841

[Patch] https://git.kernel.org/stable/c/a0f0dc96de03ffeefc2a177b7f8acde565cb77f4

[Patch] https://git.kernel.org/stable/c/f08448a885403722c5c77dae51964badfcb69495

[Third Party Advisory] https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Scores

CVSS v3 5.5

EPSS 0.0003

EPSS Percentile 6.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401

Status published

Affected Products (11)

linux/linux_kernel < 5.4.293

linux/linux_kernel

linux/linux_kernel

debian/debian_linux

linux/Kernel < 5.4.293linux

linux/Kernel < 5.10.237linux

linux/Kernel < 5.15.181linux

linux/Kernel < 6.1.135linux

linux/Kernel < 6.6.88linux

linux/Kernel < 6.12.25linux

linux/Kernel < 6.14.4linux

Timeline

Published May 20, 2025

Tracked Since Feb 18, 2026