CVE-2025-38148

In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when using one step timestamping Fix memory leak when running one-step timestamping. When running one-step sync timestamping, the HW is configured to insert the TX time into the frame, so there is no reason to keep the skb anymore. As in this case the HW will never generate an interrupt to say that the frame was timestamped, then the frame will never released. Fix this by freeing the frame in case of one-step timestamping.

• CWE-401

• https://git.kernel.org/stable/c/0b40aeaf83ca04d4c9801e235b7533400c8b5f17Patch
• https://git.kernel.org/stable/c/24b24295464f25fb771d36ed558c7cd942119361Patch
• https://git.kernel.org/stable/c/66abe22017522dd56b820e41ca3a5b131a637001Patch
• https://git.kernel.org/stable/c/846992645b25ec4253167e3f931e4597eb84af56Patch
• https://git.kernel.org/stable/c/cdbabd316c5a4a9b0fda6aafe491e2db17fbb95dPatch
• https://git.kernel.org/stable/c/db2a12ddd3a31f668137ff6a4befc1343c79cbc4Patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlThird Party Advisory

Published

Jul 3, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38142In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38143In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38144In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38145In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38146In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38147In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38149In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3815The SurveyJS plugin for WordPress is vulnerable to Stored Cr…6.4
• CVE-2025-38150In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38151In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38152In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38153In the Linux kernel, the following vulnerability has been re…7.1