Memory Leak Vulnerability in Linux Kernel Affecting One-Step Timestamping

CVE-2025-38148

What is CVE-2025-38148?

This vulnerability in the Linux kernel pertains to a memory leak issue when utilizing one-step timestamping. During this process, the hardware is set to insert the transmission timestamp directly into the frame, implying that the 'socket buffer' (skb) is no longer necessary. Since the hardware will not send an interrupt indicating that the frame has been timestamped, the allocated memory for the skb is never released. This can lead to increased memory consumption and potential system performance degradation. The issue has been rectified by ensuring the frame is freed appropriately in the event of one-step timestamping.

References