Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-39929

smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.259, 5.15.210, 6.1.154, 6.6.108, 6.12.49, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path During tests of another unrelated patch I was able to trigger this error: Objects remaining on __kmem_cache_shutdown()

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From f198186aa9bbd60fae7a2061f4feec614d880299 · fixed in 5aa69aabcb275a8012265233c7694076ce1d9102; From f198186aa9bbd60fae7a2061f4feec614d880299 · fixed in aa4cf7615328eae44f3b4bf5f4fde3fb390c27c6; From f198186aa9bbd60fae7a2061f4feec614d880299 · fixed in 3d7c075c878ac844e33c43e506c2fa27ac7e9689; From f198186aa9bbd60fae7a2061f4feec614d880299 · fixed in e7b7a93879558e77d950f1ff9a6f3daa385b33df; From f198186aa9bbd60fae7a2061f4feec614d880299 · fixed in 922338efaad63cfe30d459dfc59f9d69ff93ded4; From f198186aa9bbd60fae7a2061f4feec614d880299 · fixed in 0991418bf98f191d0c320bd25245fcffa1998c7e; From f198186aa9bbd60fae7a2061f4feec614d880299 · fixed in daac51c7032036a0ca5f1aa419ad1b0471d1c6e0

  • Linux Linux

    4.16

  • KernelLinux

    From 4.16.0 · fixed in 5.10.259; From 5.11.0 · fixed in 5.15.210; From 5.16.0 · fixed in 6.1.154; From 6.2.0 · fixed in 6.6.108; From 6.7.0 · fixed in 6.12.49; From 6.13.0 · fixed in 6.16.9

References 7

git.kernel.org