Memory Leak Vulnerability in Linux Kernel: txgbe Package Affected
Summary
DEBIAN-CVE-2025-37872: In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix memory leak in txgbe_probe() error path When txgbe_sw_init() is called, memory is allocated for wx->rss_key in wx_init_rss_key(). Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. The txgbe driver is specifically designed for Intel Ethernet controllers, facilitating network communication. This driver is critical for ensuring efficient data transmission and reception over network interfaces. However, a recent vulnerability has been identified that could lead to memory leaks, potentially impacting system performance and stability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been discovered in the txgbe driver where memory allocated for the rss_key is not freed in certain error paths during the txgbe_probe() function execution. This oversight can lead to memory leaks, which may degrade system performance over time. Additionally, there is a risk of double freeing the rss_key if the mac_table allocation fails, further complicating memory management and stability.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. The best course of action is to apply the patch by updating the Linux package as mentioned above.
Conclusion
The memory leak vulnerability in the txgbe driver of the Linux kernel poses a significant risk to system performance and stability. Users are strongly advised to update to the patched version 6.12.25-1 to mitigate this issue. Regular monitoring and prompt updates are essential for maintaining system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a memory leak in the txgbe driver of the Linux kernel, where allocated memory is not freed in certain error paths.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Check if your application is affected by this vulnerability using the Vulert playground at Vulert Scanner.
If left unaddressed, the memory leak could lead to degraded system performance, increased memory usage, and potential system crashes over time.
While there are no specific workarounds, regularly monitoring system performance and memory usage can help identify issues early.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-37872.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
