CVE-2025-71220

smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()

State
Published
Severity
Not scored
Published
Feb 14, 2026
Updated
May 23, 2026
Reserved
Feb 14, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()

When ksmbd_iov_pin_rsp() fails, we should call ksmbd_session_rpc_close().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f2283680a80571ca82d710bc6ecd8f8beac67d63 to before a2c68e256fb7a4ac34154c6e865a1389acca839fAffected
  • 9f297df20d93411c0b4ddad7f88ba04a7cd36e77 to before 2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29Affected
  • e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 04dd114b682a4ccaeba2c2bad049c8b50ce740d8Affected
  • e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before ac18761b530b5dd40f59af8a25902282e5512854Affected
  • e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before fdda836fcee6fdbcccc24e3679097efb583f581fAffected
  • e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 7c28f8eef5ac5312794d8a52918076dcd787e53bAffected
  • 5.15.145 to before 5.15.200Affected
  • 6.1.71 to before 6.1.163Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 5.15.200 through 5.15.*Not affected
  • 6.1.163 through 6.1.*Not affected
  • 6.6.124 through 6.6.*Not affected
  • 6.12.70 through 6.12.*Not affected
  • 6.18.10 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.