---
id: CVE-2025-37788
title: 'cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path

  In the for loop used to allocate the loc_array and bmap for each port, a
  memory leak is possible when…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 <
    e9de08e15aee35b96064960f95997bb6c1209c4b
  - >-
    Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 <
    118d05b530343cd9322607b9719405ba254a4183
  - >-
    Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 <
    fa2d7708955e4f8212fd69bab1da604e60cb0b15
  - >-
    Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 <
    08aa59c0be768596467552c129e9f82166779a67
  - >-
    Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 <
    dafb6e433ab2333b67be05433dc9c6ccbc7b1284
  - >-
    Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 <
    76deedea08899885f076aba0bb80bd1276446822
  - >-
    Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 <
    00ffb3724ce743578163f5ade2884374554ca021
  - Linux 5.9
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:40:43.010560Z'
published: '2025-05-01'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:41:53.885Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-37788'
references:
  - url: 'https://git.kernel.org/stable/c/e9de08e15aee35b96064960f95997bb6c1209c4b'
  - url: 'https://git.kernel.org/stable/c/118d05b530343cd9322607b9719405ba254a4183'
  - url: 'https://git.kernel.org/stable/c/fa2d7708955e4f8212fd69bab1da604e60cb0b15'
  - url: 'https://git.kernel.org/stable/c/08aa59c0be768596467552c129e9f82166779a67'
  - url: 'https://git.kernel.org/stable/c/dafb6e433ab2333b67be05433dc9c6ccbc7b1284'
  - url: 'https://git.kernel.org/stable/c/76deedea08899885f076aba0bb80bd1276446822'
  - url: 'https://git.kernel.org/stable/c/00ffb3724ce743578163f5ade2884374554ca021'
tags:
  - cve.org
epss: 0.00202
epssPercentile: 0.10184
ingestedAt: '2026-11-05T22:38:31.871Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path

In the for loop used to allocate the loc_array and bmap for each port, a
memory leak is possible when the allocation for loc_array succeeds,
but the allocation for bmap fails. This is because when the control flow
goes to the label free_eth_finfo, only the allocations starting from
(i-1)th iteration are freed.

Fix that by freeing the loc_array in the bmap allocation error path.

## Affected

- `Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 < e9de08e15aee35b96064960f95997bb6c1209c4b`
- `Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 < 118d05b530343cd9322607b9719405ba254a4183`
- `Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 < fa2d7708955e4f8212fd69bab1da604e60cb0b15`
- `Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 < 08aa59c0be768596467552c129e9f82166779a67`
- `Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 < dafb6e433ab2333b67be05433dc9c6ccbc7b1284`
- `Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 < 76deedea08899885f076aba0bb80bd1276446822`
- `Linux >= d915c299f1da68a7dbb43895b8741c7b916c9d08 < 00ffb3724ce743578163f5ade2884374554ca021`
- `Linux 5.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.