CVE-2025-68295

smb: client: fix memory leak in cifs_construct_tcon()

State: Published
Severity: Not scored
Published: Dec 16, 2025
Updated: Jun 16, 2026
Reserved: Dec 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix memory leak in cifs_construct_tcon()

When having a multiuser mount with domain= specified and using cifscreds, cifs_set_cifscreds() will end up setting @ctx->domainname, so it needs to be freed before leaving cifs_construct_tcon().

This fixes the following memory leak reported by kmemleak:

mount.cifs //srv/share /mnt -o domain=ZELDA,multiuser,... su - testuser cifscreds add -d ZELDA -u testuser ... ls /mnt/1 ... umount /mnt echo scan > /sys/kernel/debug/kmemleak cat /sys/kernel/debug/kmemleak unreferenced object 0xffff8881203c3f08 (size 8): comm "ls", pid 5060, jiffies 4307222943 hex dump (first 8 bytes): 5a 45 4c 44 41 00 cc cc ZELDA... backtrace (crc d109a8cf): __kmalloc_node_track_caller_noprof+0x572/0x710 kstrdup+0x3a/0x70 cifs_sb_tlink+0x1209/0x1770 [cifs] cifs_get_fattr+0xe1/0xf50 [cifs] cifs_get_inode_info+0xb5/0x240 [cifs] cifs_revalidate_dentry_attr+0x2d1/0x470 [cifs] cifs_getattr+0x28e/0x450 [cifs] vfs_getattr_nosec+0x126/0x180 vfs_statx+0xf6/0x220 do_statx+0xab/0x110 __x64_sys_statx+0xd5/0x130 do_syscall_64+0xbb/0x380 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before ff8f9bd1c46ee02d5558293915d42e82646d5ee9Affected f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before d146e96fef876492979658dce644305de35878d4Affected f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before 3dd546e867e94c2f954bca45a961b6104ba708b6Affected f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before f62ffdfb431bdfa4b6d24233b7fd830eca0b801eAffected f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before f15288c137d960836277d0e3ecc62de68e52f00fAffected f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before a67e91d5f446e455dd9201cdd6e865f7078d251dAffected f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before 3184b6a5a24ec9ee74087b2a550476f386df7dc2Affected 1456d3cea31114137fabf1110d20a2e2c6d6060fAffected 16764d7486d02b1699ae16e91d7a577602398b17Affected 904847402bd74a28164bd4d8da082d1eace7c190Affected 325fa2a6729b74b2806b31725940cb54658515e5Affected 8db988a982908b7bff76e095000adabf9c29698bAffected 4.4.194 to before 4.5Affected 4.9.194 to before 4.10Affected 4.14.146 to before 4.15Affected 4.19.75 to before 4.20Affected 5.2.17 to before 5.3Affected
LinuxLinux	5.3Affected before 5.3Not affected 5.10.247 through 5.10.Not affected 5.15.197 through 5.15.Not affected 6.1.159 through 6.1.Not affected 6.6.119 through 6.6.Not affected 6.12.61 through 6.12.Not affected 6.17.11 through 6.17.Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before ff8f9bd1c46ee02d5558293915d42e82646d5ee9Affected
f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before d146e96fef876492979658dce644305de35878d4Affected
f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before 3dd546e867e94c2f954bca45a961b6104ba708b6Affected
f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before f62ffdfb431bdfa4b6d24233b7fd830eca0b801eAffected
f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before f15288c137d960836277d0e3ecc62de68e52f00fAffected
f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before a67e91d5f446e455dd9201cdd6e865f7078d251dAffected
f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before 3184b6a5a24ec9ee74087b2a550476f386df7dc2Affected
1456d3cea31114137fabf1110d20a2e2c6d6060fAffected
16764d7486d02b1699ae16e91d7a577602398b17Affected
904847402bd74a28164bd4d8da082d1eace7c190Affected
325fa2a6729b74b2806b31725940cb54658515e5Affected
8db988a982908b7bff76e095000adabf9c29698bAffected
4.4.194 to before 4.5Affected
4.9.194 to before 4.10Affected
4.14.146 to before 4.15Affected
4.19.75 to before 4.20Affected
5.2.17 to before 5.3Affected

LinuxLinux

5.3Affected
before 5.3Not affected
5.10.247 through 5.10.*Not affected
5.15.197 through 5.15.*Not affected
6.1.159 through 6.1.*Not affected
6.6.119 through 6.6.*Not affected
6.12.61 through 6.12.*Not affected
6.17.11 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.