PT-2025-37964 · Linux+5 · Linux Kernel+5
Published
2025-01-01
·
Updated
2026-05-07
·
CVE-2025-39819
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A potential inconsistent update of the reference count was identified in the
smb2 compound op function. This inconsistency could lead to resource leaks. The issue arises because the reference to cfile is not always dropped after calling the function, specifically when an error occurs during memory allocation for vars. The fix introduces an additional goto label ("out") to ensure cleanup logic is always executed, even in cases of memory allocation failure. The error code "-ENOMEM" is considered non-recoverable, and replay logic is ignored.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Hat
Rocky Linux
Ubuntu