CVE-2025-37982

Katalog CVE

CVSS 5.5 · Medium EPSS 0,19%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work The skb dequeued from tx_queue is lost when wl1251_ps_elp_wakeup fails with a -ETIMEDOUT error. Fix that by queueing the skb back to tx_queue.

Rincian

Terbit di NVD

20 Mei 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/13c9744c1bcdb5de4e7dc1a78784788ecec52add patch
• https://git.kernel.org/stable/c/2996144be660d930d5e394652abe08fe89dbe00e patch
• https://git.kernel.org/stable/c/4a43fd36710669d67dbb5c16287a58412582ca26 patch
• https://git.kernel.org/stable/c/52f224009ce1e44805e6ff3ffc2a06af9c1c3c5b patch
• https://git.kernel.org/stable/c/5a90c29d0204c5ffc45b43b4eced6eef0e19a33a patch
• https://git.kernel.org/stable/c/8fd4b9551af214d037fbc9d8e179840b8b917841 patch
• https://git.kernel.org/stable/c/a0f0dc96de03ffeefc2a177b7f8acde565cb77f4 patch
• https://git.kernel.org/stable/c/f08448a885403722c5c77dae51964badfcb69495 patch
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html advisory pihak ketiga