CVE-2025-37874

In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix memory leak in ngbe_probe() error path When ngbe_sw_init() is called, memory is allocated for wx->rss_key in wx_init_rss_key(). However, in ngbe_probe() function, the subsequent error paths after ngbe_sw_init() don't free the rss_key. Fix that by freeing it in error path along with wx->mac_table. Also change the label to which execution jumps when ngbe_sw_init() fails, because otherwise, it could lead to a double free for rss_key, when the mac_table allocation fails in wx_sw_init().

• CWE-401

• https://git.kernel.org/stable/c/397487338eff1891c4654ce7deaafbf72a1688b2Patch
• https://git.kernel.org/stable/c/7c2b66a31c7a4866400f7e6fb43cb32021bfca01Patch
• https://git.kernel.org/stable/c/8335a3feb9d0d97e5e8f76d38b6bb8573d5b4a29Patch
• https://git.kernel.org/stable/c/88fa80021b77732bc98f73fb69d69c7cc37b9f0dPatch

Published

May 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-37869In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-3787A vulnerability was found in PbootCMS 3.2.5. It has been cla…6.5
• CVE-2025-37870In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37871In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37872In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37873In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37875In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37876In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37877In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37878In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37879In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-3788A vulnerability was found in baseweb JSite 1.0. It has been …5.4