Riskcovery

CVE-2025-40286

smb/server: fix possible memory leak in smb2_read()

State
Published
Severity
Not scored
Published
Dec 6, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix possible memory leak in smb2_read()

Memory leak occurs when ksmbd_vfs_read() fails. Fix this by adding the missing kvfree().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 0797c6cf3b857cc229ab2bc69552938dcd738d78Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 63d8706a2c09a0c29b8b0e8a44bc7a1339685de9Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before f1305587731886da37a214cda812ade246c653b0Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before bfda5422a16651d0bf864ec468b1c216e1b10d91Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 6fced056d2cc8d01b326e6fcfabaacb9850b71a4Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.1.159 through 6.1.*Not affected
  • 6.6.117 through 6.6.*Not affected
  • 6.12.59 through 6.12.*Not affected
  • 6.17.9 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.