TCP Vulnerability in Linux Kernel Affecting Socket Management

CVE-2025-39913

What is CVE-2025-39913?

A vulnerability exists in the Linux kernel's TCP BPF implementation, where a failure to allocate memory for the 'psock->cork' structure during a data transmission can lead to improper handling of socket messages. This issue arises when a program attached to a SOCKMAP attempts to handle data smaller than specified bytes, but fails silently due to error conditions. When this occurs, necessary state changes made to socket buffer allocations are not reverted, potentially resulting in inconsistent behavior or crashes. The vulnerability was highlighted through syzbot findings, prompting a need for improved error handling routines to ensure robust socket management.

References