CVE-2025-40103

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix refcount leak for cifs_sb_tlink Fix three refcount inconsistency issues related to `cifs_sb_tlink`. Comments for `cifs_sb_tlink` state that `cifs_put_tlink()` needs to be called after successful calls to `cifs_sb_tlink()`. Three calls fail to update refcount accordingly, leading to possible resource leaks.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/790282abe9d805f08618c1c24ea2529e7259b692
https://git.kernel.org/stable/c/896bb31e1416f582503db1350cf1bd10dc64e5a6
https://git.kernel.org/stable/c/c2b77f42205ef485a647f62082c442c1cd69d3fc
https://git.kernel.org/stable/c/d3c8ea197055c260119a13360e8202a27e53e1e4
https://git.kernel.org/stable/c/d7dd034c14928306db1b46be277ae439b84dacf9
https://git.kernel.org/stable/c/e15605b68b490186da2ad8029c0351a9cfb0b9af

Configurations

No configuration.

History

No history.

Information

Published : 2025-10-30 10:15

Updated : 2026-06-17 09:21

NVD link : CVE-2025-40103

Mitre link : CVE-2025-40103

CVE.ORG link : CVE-2025-40103

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2025-40103", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "8ceb984379462f94bdebef3288d569c6e1f912ea", "lessThan": "d3c8ea197055c260119a13360e8202a27e53e1e4", "versionType": "git"}, {"status": "affected", "version": "8ceb984379462f94bdebef3288d569c6e1f912ea", "lessThan": "790282abe9d805f08618c1c24ea2529e7259b692", "versionType": "git"}, {"status": "affected", "version": "8ceb984379462f94bdebef3288d569c6e1f912ea", "lessThan": "d7dd034c14928306db1b46be277ae439b84dacf9", "versionType": "git"}, {"status": "affected", "version": "8ceb984379462f94bdebef3288d569c6e1f912ea", "lessThan": "e15605b68b490186da2ad8029c0351a9cfb0b9af", "versionType": "git"}, {"status": "affected", "version": "8ceb984379462f94bdebef3288d569c6e1f912ea", "lessThan": "896bb31e1416f582503db1350cf1bd10dc64e5a6", "versionType": "git"}, {"status": "affected", "version": "8ceb984379462f94bdebef3288d569c6e1f912ea", "lessThan": "c2b77f42205ef485a647f62082c442c1cd69d3fc", "versionType": "git"}], "programFiles": ["fs/smb/client/inode.c", "fs/smb/client/smb2ops.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.7"}, {"status": "unaffected", "version": "0", "lessThan": "3.7", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.203", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.158", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.114", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.55", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.17.5", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/smb/client/inode.c", "fs/smb/client/smb2ops.c"], "defaultStatus": "affected"}]}], "published": "2025-10-30T10:15:34.693", "references": [{"url": "https://git.kernel.org/stable/c/790282abe9d805f08618c1c24ea2529e7259b692", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/896bb31e1416f582503db1350cf1bd10dc64e5a6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c2b77f42205ef485a647f62082c442c1cd69d3fc", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d3c8ea197055c260119a13360e8202a27e53e1e4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d7dd034c14928306db1b46be277ae439b84dacf9", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e15605b68b490186da2ad8029c0351a9cfb0b9af", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: Fix refcount leak for cifs_sb_tlink\n\nFix three refcount inconsistency issues related to `cifs_sb_tlink`.\n\nComments for `cifs_sb_tlink` state that `cifs_put_tlink()` needs to be\ncalled after successful calls to `cifs_sb_tlink()`. Three calls fail to\nupdate refcount accordingly, leading to possible resource leaks."}], "lastModified": "2026-06-17T09:21:16.167", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}