CVE-2025-40286
Not scored
smb/server: fix possible memory leak in smb2_read()
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2_read() Memory leak occurs when ksmbd_vfs_read() fails. Fix this by adding the missing kvfree().
Exploit probability
0.2%
Published
December 6, 2025
Required by
Not available
Last source change
August 12, 2026
02 / AFFECTED SOFTWARE
Affected packages
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2025-40286
View original source
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2_read() Memory leak occurs when ksmbd_vfs_read() fails. Fix this by adding the missing kvfree().
05 / REFERENCES
Further evidence
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/0797c6cf3b857cc229ab2bc69552938dcd738d78
- https://git.kernel.org/stable/c/63d8706a2c09a0c29b8b0e8a44bc7a1339685de9
- https://git.kernel.org/stable/c/6fced056d2cc8d01b326e6fcfabaacb9850b71a4
- https://git.kernel.org/stable/c/bfda5422a16651d0bf864ec468b1c216e1b10d91
- https://git.kernel.org/stable/c/f1305587731886da37a214cda812ade246c653b0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40286.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-40286