Riskcovery

CVE-2025-71153

ksmbd: Fix memory leak in get_file_all_info()

State
Published
Severity
Not scored
Published
Jan 23, 2026
Updated
May 23, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: Fix memory leak in get_file_all_info()

In get_file_all_info(), if vfs_getattr() fails, the function returns immediately without freeing the allocated filename, leading to a memory leak.

Fix this by freeing the filename before returning in this error case.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c8f7ad2df083c510e640c0bf76166593cc116ff2 to before 5012b4c812230ae066902a00442708c999111183Affected
  • 5614c8c487f6af627614dd2efca038e4afe0c6d7 to before 676907004256e0226c7ed3691db9f431404ca258Affected
  • 5614c8c487f6af627614dd2efca038e4afe0c6d7 to before d026f47db68638521df8543535ef863814fb01b1Affected
  • 5614c8c487f6af627614dd2efca038e4afe0c6d7 to before 0c56693b06a68476ba113db6347e7897475f9e4cAffected
  • f9278ba4967027ad2bf001694f0e489c7bbae6d5Affected
  • 88779f09295d82b86601fe42595748488bf5e20cAffected
  • 6.6.24 to before 6.6.120Affected
  • 6.7.12 to before 6.8Affected
  • 6.8.3 to before 6.9Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.6.120 through 6.6.*Not affected
  • 6.12.64 through 6.12.*Not affected
  • 6.18.4 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.