{"id":"CVE-2025-39834","title":"net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow\n\nWhen an invalid stc_type is provided, the function allocates memory for\nshared_stc but jumps…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"adp","vendor":"Linux","product":"Linux","affected":["Linux >= 504e536d90104c850731840d3fbc95acf251f11b < a2751e1af5dc8b1a64cfd463576c58617c2573ac","Linux >= 504e536d90104c850731840d3fbc95acf251f11b < 051fd8576a2e4e95d5870c5c9f8679c5b16882e4","Linux >= 504e536d90104c850731840d3fbc95acf251f11b < a630f83592cdad1253523a1b760cfe78fef6cd9c","Linux 6.12"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-01-14T18:18:41.812797Z"},"published":"2025-09-16","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:37:26.260Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39834","references":[{"url":"https://git.kernel.org/stable/c/a2751e1af5dc8b1a64cfd463576c58617c2573ac"},{"url":"https://git.kernel.org/stable/c/051fd8576a2e4e95d5870c5c9f8679c5b16882e4"},{"url":"https://git.kernel.org/stable/c/a630f83592cdad1253523a1b760cfe78fef6cd9c"}],"tags":["cve.org"],"epss":0.00187,"epssPercentile":0.08239,"ingestedAt":"2026-10-21T12:48:53.689Z","slug":"CVE-2025-39834","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow\n\nWhen an invalid stc_type is provided, the function allocates memory for\nshared_stc but jumps to unlock_and_out without freeing it, causing a\nmemory leak.\n\nFix by jumping to free_shared_stc label instead to ensure proper cleanup.\n\n## Affected\n\n- `Linux >= 504e536d90104c850731840d3fbc95acf251f11b < a2751e1af5dc8b1a64cfd463576c58617c2573ac`\n- `Linux >= 504e536d90104c850731840d3fbc95acf251f11b < 051fd8576a2e4e95d5870c5c9f8679c5b16882e4`\n- `Linux >= 504e536d90104c850731840d3fbc95acf251f11b < a630f83592cdad1253523a1b760cfe78fef6cd9c`\n- `Linux 6.12`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}