Memory Leak Vulnerability in Linux Kernel's Netfilter Module

CVE-2025-39764

What is CVE-2025-39764?

A memory leak vulnerability exists in the Netfilter component of the Linux kernel due to improper refcount handling in expectation dumps. The issue arises when the refcount is incremented in a manner that may result in double increments when the current expectation object is the last in line. This can lead to memory leaks, compromising system performance and reliability. Implementing improvements ensures that expectations are managed correctly within the code, ultimately enhancing overall system security.

References