CVE-2025-37757

In the Linux kernel, the following vulnerability has been resolved:

tipc: fix memory leak in tipc_link_xmit

In case the backlog transmit queue for system-importance messages is overloaded, tipc_link_xmit() returns -ENOBUFS but the skb list is not purged. This leads to memory leak and failure when a skb is allocated.

This commit fixes this issue by purging the skb list before tipc_link_xmit() returns.

This vulnerability is rated as Moderate impact because exploiting it requires a local user to generate traffic through the Transparent Inter-Process Communication (TIPC) subsystem, which can exhaust kernel memory and cause a denial of service without compromising system confidentiality or integrity. Under standard Red Hat Enterprise Linux installations, the TIPC kernel module is not loaded by default, significantly reducing exposure unless cluster messaging is intentionally configured. Systems not utilizing TIPC network sockets are unaffected by this condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.