Memory Leak in Linux Kernel SMB Client Affects System Performance

CVE-2025-40268

What is CVE-2025-40268?

A memory leak vulnerability has been identified in the SMB client of the Linux kernel, specifically within the smb3_fs_context_parse_param function. This issue arises during the parsing of parameters within fsconfig calls, where memory allocated for the first call is not properly released before the second call, leading to unreferenced memory objects. Without appropriate memory reclamation for both calls, system performance may degrade over time. Developers are urged to apply the latest patches that address this memory leak by ensuring all allocated memory is effectively freed before exiting the function.

References