What’s Vulnerable › Vulnerabilities

CVE-2025-38057: espintcp: fix skb leaks

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-07-30
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: espintcp: fix skb leaks A few error paths are missing a kfree_skb.

Affected products

• Linux kernel: from 5.6 before 6.12.31; from 6.13 before 6.14.9; 6.15-rc1, 6.15-rc2, 6.15-rc3, 6.15-rc4, 6.15-rc5, 6.15-rc6 (+1) — fixed in 6.12.31, 6.14.9

How to fix

Upgrade to a fixed version: Linux kernel 6.12.31, 6.14.9. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/05db2b850a2b8b17f3d1799f563ea1d550e05ed5
• https://git.kernel.org/stable/c/28756f22de48d25256ed89234b66b9037a3f0157
• https://git.kernel.org/stable/c/63c1f19a3be3169e51a5812d22a6d0c879414076
• https://git.kernel.org/stable/c/d8d79cf8c2b7475c22f9874eb844bcc80f858b13
• https://git.kernel.org/stable/c/e2e1f50fc5ebd2826c4e8c558dc65434382d0c0b
• https://git.kernel.org/stable/c/eb058693dfc93ed7a9c365adb899fedd648b9d9f

Get alerted when CVE-2025-38057 or the next vulnerability affects your stack