CVE-2025-40286

medium

Description

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2_read() Memory leak occurs when ksmbd_vfs_read() fails. Fix this by adding the missing kvfree().

References

https://git.kernel.org/stable/c/f1305587731886da37a214cda812ade246c653b0

https://git.kernel.org/stable/c/bfda5422a16651d0bf864ec468b1c216e1b10d91

https://git.kernel.org/stable/c/6fced056d2cc8d01b326e6fcfabaacb9850b71a4

https://git.kernel.org/stable/c/63d8706a2c09a0c29b8b0e8a44bc7a1339685de9

https://git.kernel.org/stable/c/0797c6cf3b857cc229ab2bc69552938dcd738d78

Details

Source: Mitre, NVD

Published: 2025-12-06

Updated: 2025-12-08

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H