In the Linux kernel, the following vulnerability has been resolved:
net: lan743x: Fix memleak issue when GSO enabled
Always map the skb to the LS descriptor. Previously skb was
mapped to EXT descriptor when the number of fragments is zero with
GSO enabled. Mapping the skb to EXT descriptor prevents it from
being freed, leading to a memory leak
[
{
"id": "CVE-2025-37909-044ccb67",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"136468138767852887801603996514627621711",
"143260328694134344307174850712587162269",
"14634046631311964313079500811221345073",
"53312421358424698628127377911248915501",
"9889416047496471782834196642360203384",
"243164205742273200877473871087095735436",
"158969413278395974524750554068196659864",
"192634520953773870033707525413281095003",
"191732331343204699024007774055028431983",
"58316125235196538384756579634897457971",
"14634046631311964313079500811221345073",
"148983721731203049225044390404517975474",
"50419710591256730289402475853768475292",
"272474291672000726900235928218103099583",
"53955879315478270036602437832859628044",
"133926913126499490884344689226427248596",
"166284750813564908520208433760693832902",
"287043981907078805408627104450556337611",
"98315943867190681632115703059394610402",
"222129773688116990013400667900160538285"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@093855ce90177488eac772de4eefbb909033ce5f",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-0b4811b6",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_add_fragment"
},
"digest": {
"function_hash": "54084995181281421054346354494743702520",
"length": 1436.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@189b05f189cac9fd233ef04d31cb5078c4d09c39",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-147d02ba",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_end"
},
"digest": {
"function_hash": "159336851667906415331421917057840809876",
"length": 1174.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df993daa4c968b4b23078eacc248f6502ede8664",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-2042c358",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"120032636989698687781500691786870666452",
"211595602429899947111068674942808599483",
"74810969931547404789682814433657379520",
"149713619056632475629361511421722614553"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@093855ce90177488eac772de4eefbb909033ce5f",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-21cfa435",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"136468138767852887801603996514627621711",
"143260328694134344307174850712587162269",
"14634046631311964313079500811221345073",
"53312421358424698628127377911248915501",
"9889416047496471782834196642360203384",
"243164205742273200877473871087095735436",
"158969413278395974524750554068196659864",
"192634520953773870033707525413281095003",
"191732331343204699024007774055028431983",
"58316125235196538384756579634897457971",
"14634046631311964313079500811221345073",
"148983721731203049225044390404517975474",
"50419710591256730289402475853768475292",
"272474291672000726900235928218103099583",
"53955879315478270036602437832859628044",
"133926913126499490884344689226427248596",
"166284750813564908520208433760693832902",
"287043981907078805408627104450556337611",
"98315943867190681632115703059394610402",
"222129773688116990013400667900160538285"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df993daa4c968b4b23078eacc248f6502ede8664",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-2460973f",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"120032636989698687781500691786870666452",
"211595602429899947111068674942808599483",
"74810969931547404789682814433657379520",
"149713619056632475629361511421722614553"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dae1ce27ceaea7e1522025b15252e3cc52802622",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-283156f3",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"120032636989698687781500691786870666452",
"211595602429899947111068674942808599483",
"74810969931547404789682814433657379520",
"149713619056632475629361511421722614553"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df993daa4c968b4b23078eacc248f6502ede8664",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-379cfe27",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_add_fragment"
},
"digest": {
"function_hash": "54084995181281421054346354494743702520",
"length": 1436.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f42c18e2f14c1b1fdd2a5250069a84bc854c398c",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-3b62c7d9",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_add_lso"
},
"digest": {
"function_hash": "249252776922645664517715822623696082542",
"length": 847.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dae1ce27ceaea7e1522025b15252e3cc52802622",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-4410c41f",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"136468138767852887801603996514627621711",
"143260328694134344307174850712587162269",
"14634046631311964313079500811221345073",
"53312421358424698628127377911248915501",
"9889416047496471782834196642360203384",
"243164205742273200877473871087095735436",
"158969413278395974524750554068196659864",
"192634520953773870033707525413281095003",
"191732331343204699024007774055028431983",
"58316125235196538384756579634897457971",
"14634046631311964313079500811221345073",
"148983721731203049225044390404517975474",
"50419710591256730289402475853768475292",
"272474291672000726900235928218103099583",
"53955879315478270036602437832859628044",
"133926913126499490884344689226427248596",
"166284750813564908520208433760693832902",
"287043981907078805408627104450556337611",
"98315943867190681632115703059394610402",
"222129773688116990013400667900160538285"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dae1ce27ceaea7e1522025b15252e3cc52802622",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-52bf5ae9",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_end"
},
"digest": {
"function_hash": "159336851667906415331421917057840809876",
"length": 1174.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@093855ce90177488eac772de4eefbb909033ce5f",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-58b5d625",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"136468138767852887801603996514627621711",
"143260328694134344307174850712587162269",
"14634046631311964313079500811221345073",
"53312421358424698628127377911248915501",
"9889416047496471782834196642360203384",
"243164205742273200877473871087095735436",
"158969413278395974524750554068196659864",
"192634520953773870033707525413281095003",
"191732331343204699024007774055028431983",
"58316125235196538384756579634897457971",
"14634046631311964313079500811221345073",
"148983721731203049225044390404517975474",
"50419710591256730289402475853768475292",
"272474291672000726900235928218103099583",
"53955879315478270036602437832859628044",
"133926913126499490884344689226427248596",
"166284750813564908520208433760693832902",
"287043981907078805408627104450556337611",
"98315943867190681632115703059394610402",
"222129773688116990013400667900160538285"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f42c18e2f14c1b1fdd2a5250069a84bc854c398c",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-6bed5915",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"120032636989698687781500691786870666452",
"211595602429899947111068674942808599483",
"74810969931547404789682814433657379520",
"149713619056632475629361511421722614553"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@189b05f189cac9fd233ef04d31cb5078c4d09c39",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-6f2df203",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_add_lso"
},
"digest": {
"function_hash": "249252776922645664517715822623696082542",
"length": 847.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@189b05f189cac9fd233ef04d31cb5078c4d09c39",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-8e4b4ff6",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_end"
},
"digest": {
"function_hash": "159336851667906415331421917057840809876",
"length": 1174.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@189b05f189cac9fd233ef04d31cb5078c4d09c39",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-93bb8d16",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"120032636989698687781500691786870666452",
"211595602429899947111068674942808599483",
"74810969931547404789682814433657379520",
"149713619056632475629361511421722614553"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f42c18e2f14c1b1fdd2a5250069a84bc854c398c",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-a437a1b0",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_end"
},
"digest": {
"function_hash": "159336851667906415331421917057840809876",
"length": 1174.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dae1ce27ceaea7e1522025b15252e3cc52802622",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-b0af8adb",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"136468138767852887801603996514627621711",
"143260328694134344307174850712587162269",
"14634046631311964313079500811221345073",
"53312421358424698628127377911248915501",
"9889416047496471782834196642360203384",
"243164205742273200877473871087095735436",
"158969413278395974524750554068196659864",
"192634520953773870033707525413281095003",
"191732331343204699024007774055028431983",
"58316125235196538384756579634897457971",
"14634046631311964313079500811221345073",
"148983721731203049225044390404517975474",
"50419710591256730289402475853768475292",
"272474291672000726900235928218103099583",
"53955879315478270036602437832859628044",
"133926913126499490884344689226427248596",
"166284750813564908520208433760693832902",
"287043981907078805408627104450556337611",
"98315943867190681632115703059394610402",
"222129773688116990013400667900160538285"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@189b05f189cac9fd233ef04d31cb5078c4d09c39",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-b52e81c5",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_add_lso"
},
"digest": {
"function_hash": "249252776922645664517715822623696082542",
"length": 847.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@093855ce90177488eac772de4eefbb909033ce5f",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-c728c99d",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_add_lso"
},
"digest": {
"function_hash": "249252776922645664517715822623696082542",
"length": 847.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df993daa4c968b4b23078eacc248f6502ede8664",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-cb2d3335",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_add_lso"
},
"digest": {
"function_hash": "249252776922645664517715822623696082542",
"length": 847.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f42c18e2f14c1b1fdd2a5250069a84bc854c398c",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-d31564eb",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_add_fragment"
},
"digest": {
"function_hash": "54084995181281421054346354494743702520",
"length": 1436.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dae1ce27ceaea7e1522025b15252e3cc52802622",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-da18f806",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_end"
},
"digest": {
"function_hash": "159336851667906415331421917057840809876",
"length": 1174.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f42c18e2f14c1b1fdd2a5250069a84bc854c398c",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-e3d0b650",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_add_fragment"
},
"digest": {
"function_hash": "54084995181281421054346354494743702520",
"length": 1436.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df993daa4c968b4b23078eacc248f6502ede8664",
"signature_version": "v1"
},
{
"id": "CVE-2025-37909-f94616e6",
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_main.c",
"function": "lan743x_tx_frame_add_fragment"
},
"digest": {
"function_hash": "54084995181281421054346354494743702520",
"length": 1436.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@093855ce90177488eac772de4eefbb909033ce5f",
"signature_version": "v1"
}
]