PT-2026-2519 · Linux+2 · Linux Kernel+2

Published

2025-11-29

·

Updated

2026-05-11

·

CVE-2025-68787

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contained a memory leak in the nr sendmsg() function within the netrom networking protocol implementation. The issue occurred when the sock alloc send skb() function returned NULL during the nr output() process, leading to an unreleased socket buffer (skb) allocated in nr sendmsg(). This memory leak was identified by the syzbot fuzzer. The vulnerable function is nr sendmsg().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-74390
BDU:2026-00741
CVE-2025-68787
ECHO-9D50-A4BE-2B7E
MGASA-2026-0017
MGASA-2026-0018
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8116-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8177-1
USN-8177-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8183-1
USN-8183-2
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8243-1
USN-8245-1
USN-8257-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu