CVE Database›CVE-2025-39720

CVE-2025-39720

kernel: ksmbd: fix refcount leak causing resource not released

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · September 5, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix refcount leak causing resource not released

When ksmbd_conn_releasing(opinfo->conn) returns true,the refcount was not decremented properly, causing a refcount leak that prevents the count from reaching zero and the memory from being released.

Statement

This vulnerability does not affect supported Red Hat Enterprise Linux releases because the in-kernel SMB server (ksmbd) is not enabled or shipped in Red Hat enterprise kernels. Red Hat environments rely on standard user-space implementations such as Samba for SMB file sharing services. Consequently, systems running default or supported Red Hat Linux kernel configurations are not exposed to this reference count leak or potential denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified