CVE-2025-40286

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2_read() Memory leak occurs when ksmbd_vfs_read() fails. Fix this by adding the missing kvfree().

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedDec 6, 2025
First seenDec 6, 2025

How to fix

Update
  • Linux Linux0797c6cf3b857cc229ab2bc69552938dcd738d78, 63d8706a2c09a0c29b8b0e8a44bc7a1339685de9, f1305587731886da37a214cda812ade246c653b0, bfda5422a16651d0bf864ec468b1c216e1b10d91, 6fced056d2cc8d01b326e6fcfabaacb9850b71a4 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxe2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 ≤ v < 0797c6cf3b857cc229ab2bc69552938dcd738d78, e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 ≤ v < 63d8706a2c09a0c29b8b0e8a44bc7a1339685de9, e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 ≤ v < f1305587731886da37a214cda812ade246c653b0, e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 ≤ v < bfda5422a16651d0bf864ec468b1c216e1b10d91, e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 ≤ v < 6fced056d2cc8d01b326e6fcfabaacb9850b71a4, 5.150797c6cf3b857cc229ab2bc69552938dcd738d78, 63d8706a2c09a0c29b8b0e8a44bc7a1339685de9, f1305587731886da37a214cda812ade246c653b0, bfda5422a16651d0bf864ec468b1c216e1b10d91, 6fced056d2cc8d01b326e6fcfabaacb9850b71a4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.