PT-2025-49387 · Linux+3 · Linux Kernel+3

CVE-2025-40286

·

Published

2025-10-12

·

Updated

2026-05-26

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)
Description A memory leak exists in the Linux kernel's SMB server, specifically within the smb2 read() function when ksmbd vfs read() fails. This occurs due to a missing kvfree() call, leading to potential memory exhaustion.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-08866
CVE-2025-40286
ECHO-8044-0552-B3A6
MGASA-2026-0017
MGASA-2026-0018
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8100-1
USN-8125-1
USN-8126-1
USN-8165-1
USN-8261-1

Affected Products

Debian
Linux Kernel
Linuxmint
Ubuntu