Description

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible refcount leak in smb2_sess_setup() Reference count of ksmbd_session will leak when session need reconnect. Fix this by adding the missing ksmbd_user_session_put().

INFO

Published Date :

2025-12-06T21:51:09.590Z

Last Modified :

2026-01-26T16:17:43.096Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-40285 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-40285.

URL Resource
https://git.kernel.org/stable/c/379510a815cb2e64eb0a379cb62295d6ade65df0 cve-icon cve-icon
https://git.kernel.org/stable/c/6fc935f798d44a8eb8a5e6659198399fbf57b981 cve-icon cve-icon
https://git.kernel.org/stable/c/d37b2c81c83d6c0d5ca582f4fe73c672983f9e0d cve-icon cve-icon
https://git.kernel.org/stable/c/dcc51dfe6ff26b52cac106865a172ac982d78401 cve-icon cve-icon
https://git.kernel.org/stable/c/e671f9bb97805771380c98de944e2ceab6949188 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025120718-CVE-2025-40285-9158@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-40285 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-40285 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact