CVE-2025-39834: net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow
Modified
AliasesUBUNTU-CVE-2025-39834DEBIAN-CVE-2025-39834CGA-24m4-82r2-798cCGA-26hq-97q3-j4c3CGA-294v-4m2g-hc84CGA-2h7h-v436-g2xvCGA-2x3w-jw3f-7689CGA-36fx-5q7g-v4gpCGA-389c-vg2j-45qrCGA-39f7-2cx8-r496CGA-3v47-m66p-9wc3CGA-3whp-9pq4-jxpxCGA-4677-g4hq-2rgvCGA-48rv-92cc-gx8jCGA-4g5w-46r8-h26hCGA-4pjv-83gq-cm43CGA-4x3f-8775-6fh6CGA-4xwp-x4xv-jx5pCGA-56j3-x64g-2w8wCGA-5753-4pmp-x3m5CGA-58fq-rpxm-wxr7CGA-58wg-4jp9-qvx4CGA-5cc3-mm5w-g8mrCGA-5hvq-2vwx-j9rmCGA-5r32-hc75-8f9qCGA-5rvg-hh9v-ghxfCGA-6456-6mp4-m4mcCGA-6fv2-6mjm-97vmCGA-6mw3-hxh3-f45xCGA-6qx9-2v78-hqpcCGA-6xjv-w6hp-qpcwCGA-735p-5m8m-rm39CGA-73jv-q8rp-w8qxCGA-75v7-649r-4j33CGA-768c-95fm-24hhCGA-7f3f-wrcm-pxj7CGA-7p5q-55c3-7hgvCGA-7xm9-r9r5-g5r4CGA-7xwg-m2wr-9667CGA-836h-4fq4-m8m7CGA-836r-8jg8-g7w7CGA-89gp-32rr-2hxrCGA-8fw5-4f9m-9m23CGA-8p6w-v533-j972CGA-98x8-5gxx-rc82CGA-9m9c-2c2x-fq6rCGA-9qrh-wvpx-2f3pCGA-9xmp-jwpg-45hmCGA-c4vf-57mq-pjf9CGA-cp3h-gx54-q9cwCGA-cp5c-8v98-j794CGA-cx8v-x694-53m9CGA-f6p8-2qxq-h3vwCGA-f72g-mhj3-9hwxCGA-fv3c-6jvp-9r4cCGA-g5mm-r52v-v7f8CGA-g6fh-9pg8-c4p4CGA-g7p2-6674-5p49CGA-gp22-p422-547xCGA-h2rq-xxg4-x22gCGA-h366-j755-c3cxCGA-h3cx-558x-63rjCGA-h538-r79v-69p9CGA-h5wr-2q9p-wp83CGA-hf4c-wjw2-992fCGA-hf54-96h8-8c7qCGA-hh6v-jjqw-fqr5CGA-hhrh-cpgg-fm2rCGA-hm72-3vqq-8m4vCGA-hrmq-gqr2-mmgjCGA-hrr2-jpm2-7cw3CGA-j277-x5hh-vg6vCGA-j2gp-xf33-r6c4CGA-j7hp-qfc8-hv2jCGA-j8qr-9hmw-hwvqCGA-j9fw-r86x-3wwjCGA-jj69-fvrj-86qcCGA-jq2v-r8xj-6gpvCGA-jv33-33f5-fvwrCGA-jx3w-5jcw-472jCGA-m692-8924-hmfpCGA-m6rp-p2xx-m4fpCGA-mhw9-vrwj-9p8vCGA-mrmj-5g33-vm2jCGA-mw4r-6fvj-f8jfCGA-mw5r-fp7p-v6j9CGA-pc8h-4m5g-27m9CGA-pcwg-xvxh-7825CGA-pw66-vx4x-c7xpCGA-q3c9-93fm-vfvhCGA-qhw5-p6qg-cg2cCGA-qq62-7vwq-cvgcCGA-qq75-98wp-286jCGA-qqfg-5xqh-pjq6CGA-qw47-xjww-3mj9CGA-qwqw-jjxc-qvf6CGA-qx62-h7m6-jrq8CGA-r2x6-ff3x-3xr5CGA-r76p-238c-f92cCGA-r83g-qcr5-r9j5CGA-rj36-m7w5-qj88CGA-rv25-r23r-rvqmCGA-v5c4-pjq3-qqgfCGA-v68r-rjc4-4c67CGA-v6vr-c73x-6fpjCGA-vc76-8fgw-99c3CGA-vp6g-9mr7-g848CGA-vr3m-82xq-4rp6CGA-wc98-45gg-wh65CGA-wmq7-7qxh-q6gcCGA-wwr3-j3hj-r3cgCGA-wxcw-79fr-8583CGA-x9q7-xx4g-q5c6CGA-xcc4-f6fv-66w9CGA-xgcp-7m8m-jjxcCGA-xh79-hcxj-q4f8CGA-xw82-vrjx-qpwj
Published 16-09-2025Last modified 21-10-2026
Vulnerability summary
CVE-2025-39834 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.5% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)EPSS score
0.15%
0%100%
Low · +0.02 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 8 · Related 9Timeline
- 16-09-2025PublishedVulnerability first disclosed.
- 21-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow When an invalid stc_type is provided, the function allocates memory for shared_stc but jumps to unlock_and_out without freeing it, causing a memory leak. Fix by jumping to free_shared_stc label instead to ensure proper cleanup.
CVSS metrics
5 scores · 5 sources · 1 versionMedium 5.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 5 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · ChainguardEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.15%
Chance of exploitation in the next 30 days
Percentile
4%
Versus all other CVEs
30-day change
Increase +0.02 pp
From 0.13% on 22-09-2026
22-09-202622-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu94 products
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.13All versions (No fix recorded)
- linux-aws-5.19All versions (No fix recorded)
Chainguard5 products
- linux-aws-6.12< 6.12.65-r0 | < 6.12.65-r2 | < 6.12.66-r0 | < 6.12.72-r1 | < 6.12.74-r1 | < 6.12.72-r0 | < 6.12.68-r0 | < 6.12.77-r1 | < 6.12.77-r2 | < 6.12.62-r2 | < 6.12.63-r0 | < 6.12.62-r0 | < 6.12.68-r1 | < 6.12.65-r1 | < 6.12.67-r0 | < 6.12.71-r0 | < 6.12.62-r1 | < 6.12.80-r0 | < 6.12.76-r0 | < 6.12.60-r4 | < 6.12.69-r0 | < 6.12.77-r0 | < 6.12.74-r0 | < 6.12.78-r0 | < 6.12.70-r0
- linux-azure-6.12< 6.12.65-r3 | < 6.12.76-r0 | < 6.12.63-r0 | < 6.12.65-r2 | < 6.12.68-r0 | < 6.12.60-r4 | < 6.12.78-r0 | < 6.12.62-r1 | < 6.12.69-r0 | < 6.12.66-r0 | < 6.12.77-r0 | < 6.12.70-r0 | < 6.12.72-r0 | < 6.12.77-r1 | < 6.12.67-r0 | < 6.12.65-r1 | < 6.12.74-r0 | < 6.12.60-r3 | < 6.12.65-r4 | < 6.12.80-r0 | < 6.12.74-r1 | < 6.12.77-r2 | < 6.12.71-r0 | < 6.12.62-r0 | < 6.12.62-r2
- linux-gcp-6.12< 6.12.78-r0 | < 6.12.66-r0 | < 6.12.60-r4 | < 6.12.74-r1 | < 6.12.65-r2 | < 6.12.62-r1 | < 6.12.62-r2 | < 6.12.70-r0 | < 6.12.68-r0 | < 6.12.67-r0 | < 6.12.71-r0 | < 6.12.65-r1 | < 6.12.76-r0 | < 6.12.69-r0 | < 6.12.60-r3 | < 6.12.62-r0 | < 6.12.77-r1 | < 6.12.77-r0 | < 6.12.72-r0 | < 6.12.80-r0 | < 6.12.63-r0 | < 6.12.68-r1 | < 6.12.74-r0 | < 6.12.65-r0 | < 6.12.77-r2
- linux-qemu-6.12< 6.12.80-r0 | < 6.12.65-r1 | < 6.12.77-r2 | < 6.12.72-r0 | < 6.12.66-r0 | < 6.12.70-r0 | < 6.12.68-r0 | < 6.12.76-r0 | < 6.12.71-r0 | < 6.12.67-r0 | < 6.12.78-r0 | < 6.12.69-r0 | < 6.12.77-r0 | < 6.12.77-r1 | < 6.12.74-r0 | < 6.12.65-r2 | < 6.12.74-r1
- linux-vmware-6.12< 6.12.77-r0 | < 6.12.67-r0 | < 6.12.78-r0 | < 6.12.76-r0 | < 6.12.74-r0 | < 6.12.77-r1 | < 6.12.74-r1 | < 6.12.65-r2 | < 6.12.69-r0 | < 6.12.68-r0 | < 6.12.77-r2 | < 6.12.65-r1 | < 6.12.80-r0 | < 6.12.68-r1 | < 6.12.70-r0 | < 6.12.66-r0 | < 6.12.72-r0 | < 6.12.71-r0
Linux2 products
- linux≥ 504e536d90104c850731840d3fbc95acf251f11b, < a2751e1af5dc8b1a64cfd463576c58617c2573ac | ≥ 504e536d90104c850731840d3fbc95acf251f11b, < 051fd8576a2e4e95d5870c5c9f8679c5b16882e4 | ≥ 504e536d90104c850731840d3fbc95acf251f11b, < a630f83592cdad1253523a1b760cfe78fef6cd9c | 6.12
- linux_kernel≥ 6.12, < 6.16.5 | 6.17:rc1 | 6.17:rc2 | 6.17:rc3
Debian1 product
- linuxAll versions (No fix recorded) | < 6.16.5-1
4 vendors · 102 products
