CVE-2025-40286

{"id": "CVE-2025-40286", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9", "lessThan": "0797c6cf3b857cc229ab2bc69552938dcd738d78", "versionType": "git"}, {"status": "affected", "version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9", "lessThan": "63d8706a2c09a0c29b8b0e8a44bc7a1339685de9", "versionType": "git"}, {"status": "affected", "version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9", "lessThan": "f1305587731886da37a214cda812ade246c653b0", "versionType": "git"}, {"status": "affected", "version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9", "lessThan": "bfda5422a16651d0bf864ec468b1c216e1b10d91", "versionType": "git"}, {"status": "affected", "version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9", "lessThan": "6fced056d2cc8d01b326e6fcfabaacb9850b71a4", "versionType": "git"}], "programFiles": ["fs/smb/server/smb2pdu.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.15"}, {"status": "unaffected", "version": "0", "lessThan": "5.15", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.159", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.117", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.59", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.17.9", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/smb/server/smb2pdu.c"], "defaultStatus": "affected"}]}], "published": "2025-12-06T22:15:56.797", "references": [{"url": "https://git.kernel.org/stable/c/0797c6cf3b857cc229ab2bc69552938dcd738d78", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/63d8706a2c09a0c29b8b0e8a44bc7a1339685de9", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/6fced056d2cc8d01b326e6fcfabaacb9850b71a4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/bfda5422a16651d0bf864ec468b1c216e1b10d91", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f1305587731886da37a214cda812ade246c653b0", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/server: fix possible memory leak in smb2_read()\n\nMemory leak occurs when ksmbd_vfs_read() fails.\nFix this by adding the missing kvfree()."}], "lastModified": "2026-06-17T09:21:35.900", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}