CVE-2025-40285

smb/server: fix possible refcount leak in smb2_sess_setup()

State: Published
Severity: 7.5 High
Published: Dec 6, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix possible refcount leak in smb2_sess_setup()

Reference count of ksmbd_session will leak when session need reconnect. Fix this by adding the missing ksmbd_user_session_put().

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	37a0e2b362b3150317fb6e2139de67b1e29ae5ff to before 6fc935f798d44a8eb8a5e6659198399fbf57b981Affected 450a844c045ff0895d41b05a1cbe8febd1acfcfd to before e671f9bb97805771380c98de944e2ceab6949188Affected a39e31e22a535d47b14656a7d6a893c7f6cf758c to before dcc51dfe6ff26b52cac106865a172ac982d78401Affected b95629435b84b9ecc0c765995204a4d8a913ed52 to before d37b2c81c83d6c0d5ca582f4fe73c672983f9e0dAffected b95629435b84b9ecc0c765995204a4d8a913ed52 to before 379510a815cb2e64eb0a379cb62295d6ade65df0Affected 2107ab40629aeabbec369cf34b8cf0f288c3eb1bAffected 6.1.121 to before 6.1.159Affected 6.6.67 to before 6.6.117Affected 6.12.6 to before 6.12.59Affected 5.15.176 to before 5.16Affected
LinuxLinux	6.13Affected before 6.13Not affected 6.1.159 through 6.1.Not affected 6.6.117 through 6.6.Not affected 6.12.59 through 6.12.Not affected 6.17.9 through 6.17.Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

37a0e2b362b3150317fb6e2139de67b1e29ae5ff to before 6fc935f798d44a8eb8a5e6659198399fbf57b981Affected
450a844c045ff0895d41b05a1cbe8febd1acfcfd to before e671f9bb97805771380c98de944e2ceab6949188Affected
a39e31e22a535d47b14656a7d6a893c7f6cf758c to before dcc51dfe6ff26b52cac106865a172ac982d78401Affected
b95629435b84b9ecc0c765995204a4d8a913ed52 to before d37b2c81c83d6c0d5ca582f4fe73c672983f9e0dAffected
b95629435b84b9ecc0c765995204a4d8a913ed52 to before 379510a815cb2e64eb0a379cb62295d6ade65df0Affected
2107ab40629aeabbec369cf34b8cf0f288c3eb1bAffected
6.1.121 to before 6.1.159Affected
6.6.67 to before 6.6.117Affected
6.12.6 to before 6.12.59Affected
5.15.176 to before 5.16Affected

LinuxLinux

6.13Affected
before 6.13Not affected
6.1.159 through 6.1.*Not affected
6.6.117 through 6.6.*Not affected
6.12.59 through 6.12.*Not affected
6.17.9 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.