Linux Kernel mlx5 Driver SKB Memory Leak Vulnerability

Vulnerability

A vulnerability in the Linux kernel's mlx5 driver can lead to a memory leak of socket buffer (SKB) structures during Precision Time Protocol (PTP) synchronization operations. This issue occurs because SKBs are removed from the FIFO queue but not properly freed, causing a resource leak. The problem is exacerbated by an error in the FIFO room check, which can incorrectly report available space due to type promotion issues in C. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability can cause a memory leak by failing to free SKB structures, potentially leading to increased memory usage and exhaustion of available resources.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.

Added: Dec 30, 2025, 3:16 PM
Updated: Dec 30, 2025, 3:16 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
7.7
relevance
1.8
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.