CVE-2025-37962

ksmbd: fix memory leak in parse_lease_state()

published May 20, 2025

CVSS
—
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix memory leak in parse_lease_state()

The previous patch that added bounds check for create lease context

introduced a memory leak. When the bounds check fails, the function

returns NULL without freeing the previously allocated lease_ctx_info

structure.

This patch fixes the issue by adding kfree(lreq) before returning NULL

in both boundary check cases.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Published
2025-05-20T16:01Z
EPSS history
Timeline
  • 20 MAY 16:01Z
    ksmbd: fix memory leak in parse_lease_state()
    cvelistv5