CVE-2025-39720
kernel: ksmbd: fix refcount leak causing resource not released
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · September 5, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix refcount leak causing resource not released
When ksmbd_conn_releasing(opinfo->conn) returns true,the refcount was not decremented properly, causing a refcount leak that prevents the count from reaching zero and the memory from being released.
Statement
This vulnerability does not affect supported Red Hat Enterprise Linux releases because the in-kernel SMB server (ksmbd) is not enabled or shipped in Red Hat enterprise kernels. Red Hat environments rely on standard user-space implementations such as Samba for SMB file sharing services. Consequently, systems running default or supported Red Hat Linux kernel configurations are not exposed to this reference count leak or potential denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified