Vulnerability in Linux

CVE-2025-40286

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2_read() Memory leak occurs when ksmbd_vfs_read() fails. Fix this by adding the missing kvfree().

EPSS: 0.002 (6.2th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, 5.15, 0

References