{"id":"CVE-2025-37909","title":"net: lan743x: Fix memleak issue when GSO enabled","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: lan743x: Fix memleak issue when GSO enabled\n\nAlways map the `skb` to the LS descriptor. Previously skb was\nmapped to EXT descriptor when the number of fragments is…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < 093855ce90177488eac772de4eefbb909033ce5f","Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < 6c65ee5ad632eb8dcd3a91cf5dc99b22535f44d9","Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < df993daa4c968b4b23078eacc248f6502ede8664","Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < a0e0efbabbbe6a1859bc31bf65237ce91e124b9b","Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < dae1ce27ceaea7e1522025b15252e3cc52802622","Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < 189b05f189cac9fd233ef04d31cb5078c4d09c39","Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < f42c18e2f14c1b1fdd2a5250069a84bc854c398c","Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < 2d52e2e38b85c8b7bc00dca55c2499f46f8c8198","Linux 4.17"],"published":"2025-05-20","updated":"2026-09-08","sourceUpdated":"2026-09-08T08:41:29.115Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-37909","references":[{"url":"https://git.kernel.org/stable/c/093855ce90177488eac772de4eefbb909033ce5f"},{"url":"https://git.kernel.org/stable/c/6c65ee5ad632eb8dcd3a91cf5dc99b22535f44d9"},{"url":"https://git.kernel.org/stable/c/df993daa4c968b4b23078eacc248f6502ede8664"},{"url":"https://git.kernel.org/stable/c/a0e0efbabbbe6a1859bc31bf65237ce91e124b9b"},{"url":"https://git.kernel.org/stable/c/dae1ce27ceaea7e1522025b15252e3cc52802622"},{"url":"https://git.kernel.org/stable/c/189b05f189cac9fd233ef04d31cb5078c4d09c39"},{"url":"https://git.kernel.org/stable/c/f42c18e2f14c1b1fdd2a5250069a84bc854c398c"},{"url":"https://git.kernel.org/stable/c/2d52e2e38b85c8b7bc00dca55c2499f46f8c8198"}],"tags":["cve.org"],"epss":0.00216,"epssPercentile":0.12232,"ingestedAt":"2026-09-08T15:33:26.997Z","slug":"CVE-2025-37909","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: lan743x: Fix memleak issue when GSO enabled\n\nAlways map the `skb` to the LS descriptor. Previously skb was\nmapped to EXT descriptor when the number of fragments is zero with\nGSO enabled. Mapping the skb to EXT descriptor prevents it from\nbeing freed, leading to a memory leak\n\n## Affected\n\n- `Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < 093855ce90177488eac772de4eefbb909033ce5f`\n- `Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < 6c65ee5ad632eb8dcd3a91cf5dc99b22535f44d9`\n- `Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < df993daa4c968b4b23078eacc248f6502ede8664`\n- `Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < a0e0efbabbbe6a1859bc31bf65237ce91e124b9b`\n- `Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < dae1ce27ceaea7e1522025b15252e3cc52802622`\n- `Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < 189b05f189cac9fd233ef04d31cb5078c4d09c39`\n- `Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < f42c18e2f14c1b1fdd2a5250069a84bc854c398c`\n- `Linux >= 23f0703c125be490f70501b6b24ed5645775c56a < 2d52e2e38b85c8b7bc00dca55c2499f46f8c8198`\n- `Linux 4.17`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}