Memory Leak Vulnerability in Linux Kernel TCP Component

CVE-2025-39852

What is CVE-2025-39852?

A vulnerability exists in the Linux Kernel's TCP component, specifically in the handling of TCP-AO failure for IPv6. When the function tcp_ao_copy_all_matching() fails in tcp_v6_syn_recv_sock(), it exits without properly freeing memory, leading to a memory leak. This oversight may allow unreferenced socket objects to accumulate, ultimately affecting system performance and stability. The vulnerability has been addressed by ensuring that proper cleanup routines are called during error handling, aligning the IPv6 approach with the previously established methods used for IPv4.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References