CVE-2025-39852

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the TCP-AO failure handling for IPv6 within the Linux kernel. Specifically, when tcp ao copy all matching() fails in tcp v6 syn recv sock(), the function exits without properly freeing allocated memory, leading to a memory leak. This occurs because inet csk prepare forced close() and tcp done() are not called upon error, which are necessary for correct memory deallocation. The issue is addressed by ensuring consistent error handling between tcp v4 syn recv sock() and tcp v6 syn recv sock().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.