CVE-2025-38057: espintcp: fix skb leaks
Vulnerability summary
CVE-2025-38057 is a high (CVSS 7.5) vulnerability in linux. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 41.7% of scored vulnerabilities.
Severe, CVSS 7.5 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 0% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 48 · Related 47Timeline
- 18-06-2025PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: espintcp: fix skb leaks A few error paths are missing a kfree_skb.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
0.48%
Chance of exploitation in the next 30 days
Percentile
42%
Versus all other CVEs
30-day change
Increase +0.01 pp
From 0.47% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu133 products
- linux< 5.15.0-176.186 | < 6.8.0-100.100
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1105.112 | < 6.8.0-1046.49
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ e27cca96cd68fa2c6814c90f9a1cfd36bb68c593, < 05db2b850a2b8b17f3d1799f563ea1d550e05ed5 | ≥ e27cca96cd68fa2c6814c90f9a1cfd36bb68c593, < e2e1f50fc5ebd2826c4e8c558dc65434382d0c0b | ≥ e27cca96cd68fa2c6814c90f9a1cfd36bb68c593, < d8d79cf8c2b7475c22f9874eb844bcc80f858b13 | ≥ e27cca96cd68fa2c6814c90f9a1cfd36bb68c593, < 28756f22de48d25256ed89234b66b9037a3f0157 | ≥ e27cca96cd68fa2c6814c90f9a1cfd36bb68c593, < eb058693dfc93ed7a9c365adb899fedd648b9d9f | ≥ e27cca96cd68fa2c6814c90f9a1cfd36bb68c593, < 63c1f19a3be3169e51a5812d22a6d0c879414076 | 5.6
- linux_kernel≥ 5.6, < 6.12.31 | ≥ 6.13, < 6.14.9 | 6.15:rc1 | 6.15:rc2 | 6.15:rc3 | 6.15:rc4 | 6.15:rc5 | 6.15:rc6 | 6.15:rc7
Debian1 product
- linux< 6.1.159-1 | < 6.12.32-1
3 vendors · 136 products
