PT-2025-49369 · Linux+3 · Linux Kernel+3
Published
2025-11-07
·
Updated
2026-05-07
·
CVE-2025-40268
CVSS v2.0
1.7
Low
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a memory leak in the
smb3 fs context parse param function within the CIFS client. The issue occurs when fsconfig is called multiple times, where memory associated with the first call is not properly freed upon program exit. Specifically, the source memory for the initial fsconfig call remains unreferenced, leading to a memory leak. The kstrdup function is involved in the allocation of this memory. The smb3 fs context parse param function is responsible for parsing parameters, and the leak occurs during this process.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu