CVE-2025-40286

Linux Kernel 5.15.0-6.1.158, 6.2.0-6.6.116, 6.7.0-6.12.58, 6.13.0-6.17.8 - Memory Leak in SMB Server Read Operation

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2_read() Memory leak occurs when ksmbd_vfs_read() fails. Fix this by adding the missing kvfree().

References (5)

Core 5

Scores

EPSS 0.0006
EPSS Percentile 17.7%

Details

Status published
Products (16)
linux/Kernel 5.15.0 - 6.1.159linux
linux/Kernel 6.13.0 - 6.17.9linux
linux/Kernel 6.2.0 - 6.6.117linux
linux/Kernel 6.7.0 - 6.12.59linux
Linux/Linux < 5.15
Linux/Linux 5.15
Linux/Linux 6.1.159 - 6.1.*
Linux/Linux 6.12.59 - 6.12.*
Linux/Linux 6.17.9 - 6.17.*
Linux/Linux 6.18
... and 6 more
Published Dec 06, 2025
Tracked Since Feb 18, 2026