VYPR
← All advisories
High severity7.5NVD Advisory· Published Feb 27, 2025· Updated Jul 30, 2026

CVE-2025-21788

CVE-2025-21788

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases

If the XDP program doesn't result in XDP_PASS then we leak the memory allocated by am65_cpsw_build_skb().

It is pointless to allocate SKB memory before running the XDP program as we would be wasting CPU cycles for cases other than XDP_PASS. Move the SKB allocation after evaluating the XDP program result.

This fixes the memleak. A performance boost is seen for XDP_DROP test.

XDP_DROP test: Before: 460256 rx/s 0 err/s After: 784130 rx/s 0 err/s

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Linux/Kernel5 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.10,<6.12.16
    • cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 6.10
  • osv-coords2 versions
    pkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:linux/kernel
    < 6.11.0-1014.15+ 1 more
    • (no CPE)range: < 6.11.0-1014.15
    • (no CPE)range: >= 6.10.0, < 6.12.16

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.