PT-2025-49449 · Linux+3 · Linux Kernel+3
Published
2025-10-27
·
Updated
2026-05-07
·
CVE-2025-40320
CVSS v2.0
5.7
Medium
| Vector | AV:L/AC:H/Au:S/C:P/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw within the Server Message Block (SMB) client implementation, specifically in the
smb2 query info compound function. A use-after-free condition can occur when the function retries an operation, potentially acting on a stale pointer if a previously allocated context ID (cfid) has been freed during the first attempt. This can lead to system instability. The issue is triggered when cfid is not reset to NULL upon replay. A trace indicates a refcount underflow and use-after-free occurring at refcount warn saturate.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu