CVE-2025-21788

net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases

Medium · published February 27, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
41.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases

If the XDP program doesn't result in XDP_PASS then we leak the

memory allocated by am65_cpsw_build_skb().

It is pointless to allocate SKB memory before running the XDP

program as we would be wasting CPU cycles for cases other than XDP_PASS.

Move the SKB allocation after evaluating the XDP program result.

This fixes the memleak. A performance boost is seen for XDP_DROP test.

XDP_DROP test:

Before: 460256 rx/s 0 err/s

After: 784130 rx/s 0 err/s

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00498 · 41.8th percentile
Published
2025-02-27T02:18Z
EPSS history
Timeline
  • 27 FEB 02:18Z
    net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases
    cvelistv5