Refcount Leak Vulnerability in Linux Kernel's ksmbd Service

CVE-2025-39720

What is CVE-2025-39720?

A refcount leak has been detected in the ksmbd service of the Linux kernel, which prevents proper resource deallocation. When the ksmbd_conn_releasing function indicates a connection is being released, the reference count is not decremented as intended. This leads to a situation where the reference count does not reach zero, resulting in memory resources remaining allocated and potentially causing resource exhaustion over time. It is crucial for users and administrators to address this vulnerability to secure their systems against unintended behavior and performance degradation.

References