CVE-2025-71204

A reference count leak flaw was found in the Linux kernel's ksmbd in-kernel SMB server. In the parse_durable_handle_context() function, when a command is detected as a replay operation and returns -ENOEXEC, the reference count of the ksmbd_file structure is not properly released. This leads to a resource leak that could result in gradual memory exhaustion over time.

This flaw affects the ksmbd in-kernel SMB server, which is not widely deployed in production environments. Exploitation requires authenticated SMB client access capable of issuing durable handle replay operations, limiting the attack surface significantly.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the ksmbd module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist kernel modules.