CVE-2025-40103

smb: client: Fix refcount leak for cifs_sb_tlink

State: Published
Severity: Not scored
Published: Oct 30, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Fix refcount leak for cifs_sb_tlink

Fix three refcount inconsistency issues related to `cifs_sb_tlink`.

Comments for `cifs_sb_tlink` state that `cifs_put_tlink()` needs to be called after successful calls to `cifs_sb_tlink()`. Three calls fail to update refcount accordingly, leading to possible resource leaks.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8ceb984379462f94bdebef3288d569c6e1f912ea to before d3c8ea197055c260119a13360e8202a27e53e1e4Affected 8ceb984379462f94bdebef3288d569c6e1f912ea to before 790282abe9d805f08618c1c24ea2529e7259b692Affected 8ceb984379462f94bdebef3288d569c6e1f912ea to before d7dd034c14928306db1b46be277ae439b84dacf9Affected 8ceb984379462f94bdebef3288d569c6e1f912ea to before e15605b68b490186da2ad8029c0351a9cfb0b9afAffected 8ceb984379462f94bdebef3288d569c6e1f912ea to before 896bb31e1416f582503db1350cf1bd10dc64e5a6Affected 8ceb984379462f94bdebef3288d569c6e1f912ea to before c2b77f42205ef485a647f62082c442c1cd69d3fcAffected
LinuxLinux	3.7Affected before 3.7Not affected 5.15.203 through 5.15.Not affected 6.1.158 through 6.1.Not affected 6.6.114 through 6.6.Not affected 6.12.55 through 6.12.Not affected 6.17.5 through 6.17.*Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

8ceb984379462f94bdebef3288d569c6e1f912ea to before d3c8ea197055c260119a13360e8202a27e53e1e4Affected
8ceb984379462f94bdebef3288d569c6e1f912ea to before 790282abe9d805f08618c1c24ea2529e7259b692Affected
8ceb984379462f94bdebef3288d569c6e1f912ea to before d7dd034c14928306db1b46be277ae439b84dacf9Affected
8ceb984379462f94bdebef3288d569c6e1f912ea to before e15605b68b490186da2ad8029c0351a9cfb0b9afAffected
8ceb984379462f94bdebef3288d569c6e1f912ea to before 896bb31e1416f582503db1350cf1bd10dc64e5a6Affected
8ceb984379462f94bdebef3288d569c6e1f912ea to before c2b77f42205ef485a647f62082c442c1cd69d3fcAffected

LinuxLinux

3.7Affected
before 3.7Not affected
5.15.203 through 5.15.*Not affected
6.1.158 through 6.1.*Not affected
6.6.114 through 6.6.*Not affected
6.12.55 through 6.12.*Not affected
6.17.5 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.