PT-2025-36289 · Linux+3 · Linux Kernel+3

Published 2025-08-13 · Updated 2026-04-07 · CVE-2025-39695

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s RDMA/rxe subsystem related to the handling of SKB packets and RXE resources. Specifically, the issue occurs when skb packets are sent and still depend on RXE resources (like QP and sk). Releasing these resources while the packets are being destroyed can lead to call trace issues. To prevent packets from remaining in network devices for extended periods, a timestamp is added upon packet creation. If packets exceed a certain duration, the network device can free them to release the associated RXE resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2025-15726

CVE-2025-39695

DSA-6008-1

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03601-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025:3725-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1376

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39695.json · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2025:20081-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-39695 · Vendor Advisory
• https://git.kernel.org/stable/c/3c3e9a9f2972b364e8c2cfbfdeb23c6d6be4f87f · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:21139-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-39695 · Vendor Advisory
• https://git.kernel.org/stable/c/732d4bd7b78a2752ad43cc39287ef41893c5eee2 · Patch
• https://git.kernel.org/stable/c/8ead139a8edef485cc36d3a792e2ae5dd538339a · Patch
• https://cve.org/CVERecord?id=CVE-2025-39695 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03601-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03633-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39695 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39695 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39695 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3725-1 · Vendor Advisory