CVE-2025-37962
ksmbd: fix memory leak in parse_lease_state()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.14, 6.1.139, 6.6.91, 6.12.29, 6.14.7
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The previous patch that added bounds check for create lease context introduced a memory leak. When the bounds check fails, the function returns NULL without freeing the previously allocated lease_ctx_info structure. This patch fixes the issue by adding kfree(lreq) before returning NULL in both boundary check cases.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 6.13.11 · fixed in 6.14
- Linux Linux
From 6.1.134 · fixed in 6.1.139; From 6.6.87 · fixed in 6.6.91; From 6.12.23 · fixed in 6.12.29; From 6.14.2 · fixed in 6.14.7