CVE-2025-37874

net: ngbe: fix memory leak in ngbe_probe() error path

published May 9, 2025

CVSS
—
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: ngbe: fix memory leak in ngbe_probe() error path

When ngbe_sw_init() is called, memory is allocated for wx->rss_key

in wx_init_rss_key(). However, in ngbe_probe() function, the subsequent

error paths after ngbe_sw_init() don't free the rss_key. Fix that by

freeing it in error path along with wx->mac_table.

Also change the label to which execution jumps when ngbe_sw_init()

fails, because otherwise, it could lead to a double free for rss_key,

when the mac_table allocation fails in wx_sw_init().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00319 · 23.7th percentile
Published
2025-05-09T06:44Z
EPSS history
Timeline
  • 09 MAY 06:44Z
    net: ngbe: fix memory leak in ngbe_probe() error path
    cvelistv5