CVE-2025-38545

MEDIUM

Linux Kernel 6.10-6.12.39, 6.13-6.15.7 - Use-After-Free in SKB Memory Allocation

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info While transitioning from netdev_alloc_ip_align() to build_skb(), memory for the "skb_shared_info" member of an "skb" was not allocated. Fix this by allocating "PAGE_SIZE" as the skb length, accounting for the packet length, headroom and tailroom, thereby including the required memory space for skb_shared_info.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/fc2fffa2facac15ce711e95f98f954426e025bc5

Patch

https://git.kernel.org/stable/c/7d6ca0c8c0caf9a13cae2de763bb1f2a9ea7eabb

Patch

https://git.kernel.org/stable/c/02c4d6c26f1f662da8885b299c224ca6628ad232

Scores

CVSS v3 5.5

EPSS 0.0013

EPSS Percentile 3.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-401

Status published

Products (12)

linux/Kernel 6.10.0 - 6.12.39linux

linux/Kernel 6.13.0 - 6.15.7linux

Linux/Linux < 6.10

Linux/Linux 6.10

Linux/Linux 6.12.39 - 6.12.*

Linux/Linux 6.15.7 - 6.15.*

Linux/Linux 6.16

Linux/Linux 8acacc40f7337527ff84cd901ed2ef0a2b95b2b6 - 02c4d6c26f1f662da8885b299c224ca6628ad232

Linux/Linux 8acacc40f7337527ff84cd901ed2ef0a2b95b2b6 - 7d6ca0c8c0caf9a13cae2de763bb1f2a9ea7eabb

Linux/Linux 8acacc40f7337527ff84cd901ed2ef0a2b95b2b6 - fc2fffa2facac15ce711e95f98f954426e025bc5

... and 2 more

Published Aug 16, 2025

Tracked Since Feb 18, 2026