CVE-2025-37909

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the `skb` to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to EXT descriptor prevents it from being freed, leading to a memory leak

• CWE-401

• https://git.kernel.org/stable/c/093855ce90177488eac772de4eefbb909033ce5fPatch
• https://git.kernel.org/stable/c/189b05f189cac9fd233ef04d31cb5078c4d09c39Patch
• https://git.kernel.org/stable/c/2d52e2e38b85c8b7bc00dca55c2499f46f8c8198Patch
• https://git.kernel.org/stable/c/6c65ee5ad632eb8dcd3a91cf5dc99b22535f44d9Patch
• https://git.kernel.org/stable/c/a0e0efbabbbe6a1859bc31bf65237ce91e124b9bPatch
• https://git.kernel.org/stable/c/dae1ce27ceaea7e1522025b15252e3cc52802622Patch
• https://git.kernel.org/stable/c/df993daa4c968b4b23078eacc248f6502ede8664Patch
• https://git.kernel.org/stable/c/f42c18e2f14c1b1fdd2a5250069a84bc854c398cPatch
• https://lists.debian.org/debian-lts-announce/2025/08/msg00010.htmlMailing List
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.htmlMailing List
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html

Published

May 20, 2025

Last Modified

Jul 14, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-37903In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-37904In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37905In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37906In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2025-37907In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37908In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-3791A vulnerability classified as critical was found in symisc U…5.3
• CVE-2025-37910In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37911In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37912In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37913In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-37914In the Linux kernel, the following vulnerability has been re…7.8