CVE-2025-40286

CVE-2025-40286

published December 7, 2025

CVSS
—
EPSS
0%
Percentile
7.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix possible memory leak in smb2_read()

Memory leak occurs when ksmbd_vfs_read() fails.

Fix this by adding the missing kvfree().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.7th percentile
Published
2025-12-07T03:15Z
References (5)
https://git.kernel.org/stable/c/0797c6cf3b857cc229ab2bc69552938dcd738d78 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/63d8706a2c09a0c29b8b0e8a44bc7a1339685de9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6fced056d2cc8d01b326e6fcfabaacb9850b71a4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bfda5422a16651d0bf864ec468b1c216e1b10d91 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f1305587731886da37a214cda812ade246c653b0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 06 DEC 21:51Z
    smb/server: fix possible memory leak in smb2_read()
    cvelistv5