Memory Leak Vulnerability in Linux Kernel smb2_read Function

CVE-2025-40286

What is CVE-2025-40286?

A vulnerability has been identified in the Linux kernel's smb/server module, specifically within the smb2_read function, which could lead to a memory leak. This issue arises during the execution of ksmbd_vfs_read() when it fails to properly deallocate memory, resulting in potential resource exhaust. The resolution involves adding a missing kvfree() call to ensure memory is reclaimed appropriately, mitigating the risk of performance degradation and system instability. It is essential for users and administrators to apply the latest kernel updates to safeguard their systems effectively.

References