PT-2025-37222 · Linux+2 · Linux Kernel+2

Published 2025-08-07 · Updated 2026-04-20 · CVE-2025-39764

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The netfilter component in the Linux kernel contains an issue in the ctnetlink module related to expectation dumpers. A flaw exists where the refcount of an expectation object may be incorrectly incremented, leading to a memory leak. This occurs due to a potential double-increment of the refcount when checking if the expectation object is the last one.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-67160

AZL-70828

BDU:2026-06107

CVE-2025-39764

ECHO-3D2F-3CE2-8FBB

OESA-2026-1566

OESA-2026-1567

OESA-2026-1570

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03600-1

SUSE-SU-2025:03601-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025:3725-1

SUSE-SU-2025:3751-1

Affected Products

Debian

Linux Kernel

Suse

References · 2059

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39764.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39764 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1570 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71236 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:21179-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1566 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38491 · Security Note
• https://git.kernel.org/stable/c/a4d634ded4d3d400f115d84f654f316f249531c9 · Patch
• https://security-tracker.debian.org/tracker/CVE-2025-39764 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23059 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23190 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23003 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68768 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23047 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23054 · Security Note