Resource Leak in Linux Kernel Caused by CIFS Client Refcount Issues

CVE-2025-40103

What is CVE-2025-40103?

The Linux kernel has been identified with a vulnerability related to CIFS client refcount inconsistencies. Specifically, the issue arises from three missing updates to the reference count of 'cifs_sb_tlink', which can result in resource leaks. Proper management of the reference count is crucial to prevent potential system resource exhaustion. Developers are encouraged to ensure that the function 'cifs_put_tlink()' is called accurately after utilizing 'cifs_sb_tlink()' to mitigate the risk of these leaks.

References