Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-40286

smb/server: fix possible memory leak in smb2_read()

Description

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2_read() Memory leak occurs when ksmbd_vfs_read() fails. Fix this by adding the missing kvfree().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 0797c6cf3b857cc229ab2bc69552938dcd738d78affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 63d8706a2c09a0c29b8b0e8a44bc7a1339685de9affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < f1305587731886da37a214cda812ade246c653b0affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < bfda5422a16651d0bf864ec468b1c216e1b10d91affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 6fced056d2cc8d01b326e6fcfabaacb9850b71a4affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 6.1.159 to ≤ 6.1.*unaffected
  • 6.6.117 to ≤ 6.6.*unaffected
  • 6.12.59 to ≤ 6.12.*unaffected
  • 6.17.9 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References