CVE-2025-39929

smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

State: Published
Severity: 7.5 High
Published: Oct 4, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

During tests of another unrelated patch I was able to trigger this error: Objects remaining on __kmem_cache_shutdown()

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f198186aa9bbd60fae7a2061f4feec614d880299 to before 5aa69aabcb275a8012265233c7694076ce1d9102Affected f198186aa9bbd60fae7a2061f4feec614d880299 to before aa4cf7615328eae44f3b4bf5f4fde3fb390c27c6Affected f198186aa9bbd60fae7a2061f4feec614d880299 to before 3d7c075c878ac844e33c43e506c2fa27ac7e9689Affected f198186aa9bbd60fae7a2061f4feec614d880299 to before e7b7a93879558e77d950f1ff9a6f3daa385b33dfAffected f198186aa9bbd60fae7a2061f4feec614d880299 to before 922338efaad63cfe30d459dfc59f9d69ff93ded4Affected f198186aa9bbd60fae7a2061f4feec614d880299 to before 0991418bf98f191d0c320bd25245fcffa1998c7eAffected f198186aa9bbd60fae7a2061f4feec614d880299 to before daac51c7032036a0ca5f1aa419ad1b0471d1c6e0Affected
LinuxLinux	4.16Affected before 4.16Not affected 5.10.259 through 5.10.Not affected 5.15.210 through 5.15.Not affected 6.1.154 through 6.1.Not affected 6.6.108 through 6.6.Not affected 6.12.49 through 6.12.Not affected 6.16.9 through 6.16.Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

f198186aa9bbd60fae7a2061f4feec614d880299 to before 5aa69aabcb275a8012265233c7694076ce1d9102Affected
f198186aa9bbd60fae7a2061f4feec614d880299 to before aa4cf7615328eae44f3b4bf5f4fde3fb390c27c6Affected
f198186aa9bbd60fae7a2061f4feec614d880299 to before 3d7c075c878ac844e33c43e506c2fa27ac7e9689Affected
f198186aa9bbd60fae7a2061f4feec614d880299 to before e7b7a93879558e77d950f1ff9a6f3daa385b33dfAffected
f198186aa9bbd60fae7a2061f4feec614d880299 to before 922338efaad63cfe30d459dfc59f9d69ff93ded4Affected
f198186aa9bbd60fae7a2061f4feec614d880299 to before 0991418bf98f191d0c320bd25245fcffa1998c7eAffected
f198186aa9bbd60fae7a2061f4feec614d880299 to before daac51c7032036a0ca5f1aa419ad1b0471d1c6e0Affected

LinuxLinux

4.16Affected
before 4.16Not affected
5.10.259 through 5.10.*Not affected
5.15.210 through 5.15.*Not affected
6.1.154 through 6.1.*Not affected
6.6.108 through 6.6.*Not affected
6.12.49 through 6.12.*Not affected
6.16.9 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.