Memory Leak Vulnerability in Linux Kernel's MLX5 Network Driver

CVE-2025-39834

What is CVE-2025-39834?

A memory leak vulnerability exists in the Linux kernel's MLX5 network driver, specifically in the function handling shares for the STC NIC. When an invalid 'stc_type' is received, memory is allocated for the shared STC but is not released if the execution jumps to the 'unlock_and_out' pathway. This oversight can lead to significant memory consumption and degrade system performance over time, as allocated resources remain unfreed. The issue has been identified and resolved by modifying the error handling path to ensure proper memory cleanup.

References