Vulnerability in Linux

CVE-2025-40103

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix refcount leak for cifs_sb_tlink Fix three refcount inconsistency issues related to `cifs_sb_tlink`. Comments for `cifs_sb_tlink` state that `cifs_put_tlink()` needs to be called after successful calls to `cifs_sb_tlink()`. Three calls fail to update refcount accordingly, leading to possible resource leaks.

EPSS: 0.002 (9.3th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 8ceb984379462f94bdebef3288d569c6e1f912ea, 3.7, 0

References