{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-38148",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-38148",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2025-07-03T08:35:53.544Z",
    "updatedAt": "2026-05-11T21:22:11.360Z",
    "importedAt": "2026-10-24T01:57:34.152Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "net: phy: mscc: Fix memory leak when using one step timestamping",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: mscc: Fix memory leak when using one step timestamping\n\nFix memory leak when running one-step timestamping. When running\none-step sync timestamping, the HW is configured to insert the TX time\ninto the frame, so there is no reason to keep the skb anymore. As in\nthis case the HW will never generate an interrupt to say that the frame\nwas timestamped, then the frame will never released.\nFix this by freeing the frame in case of one-step timestamping.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "7d272e63e0979d38a6256108adbe462d621c26c5",
              "status": "affected",
              "versionType": "git",
              "lessThan": "24b24295464f25fb771d36ed558c7cd942119361"
            },
            {
              "version": "7d272e63e0979d38a6256108adbe462d621c26c5",
              "status": "affected",
              "versionType": "git",
              "lessThan": "db2a12ddd3a31f668137ff6a4befc1343c79cbc4"
            },
            {
              "version": "7d272e63e0979d38a6256108adbe462d621c26c5",
              "status": "affected",
              "versionType": "git",
              "lessThan": "0b40aeaf83ca04d4c9801e235b7533400c8b5f17"
            },
            {
              "version": "7d272e63e0979d38a6256108adbe462d621c26c5",
              "status": "affected",
              "versionType": "git",
              "lessThan": "66abe22017522dd56b820e41ca3a5b131a637001"
            },
            {
              "version": "7d272e63e0979d38a6256108adbe462d621c26c5",
              "status": "affected",
              "versionType": "git",
              "lessThan": "cdbabd316c5a4a9b0fda6aafe491e2db17fbb95d"
            },
            {
              "version": "7d272e63e0979d38a6256108adbe462d621c26c5",
              "status": "affected",
              "versionType": "git",
              "lessThan": "846992645b25ec4253167e3f931e4597eb84af56"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "5.9",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "5.9"
            },
            {
              "version": "5.15.192",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.142",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.94",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.34",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.15.3",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.15.*"
            },
            {
              "version": "6.16",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}