Not yet scoredPublished Dec 6, 2025

CVE-2025-40268cifs: client: fix memory leak in smb3_fs_context_parse_param

Updated under an hour ago (Oct 27, 2026, 12:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: cifs: client: fix memory leak in smb3_fs_context_parse_param The user calls fsconfig twice, but when the program exits, free() only frees ctx->source for the second fsconfig, not the first. Regarding fc->source, there is no code in the fs context related to its memory reclamation. To fix this memory leak, release the source memory corresponding to ctx or fc before each parsing. syzbot reported: BUG: memory leak unreferenced object 0xffff888128afa360 (size 96): backtrace (crc 79c9c7ba): kstrdup+0x3c/0x80 mm/util.c:84 smb3_fs_context_parse_param+0x229b/0x36c0 fs/smb/client/fs_context.c:1444 BUG: memory leak unreferenced object 0xffff888112c7d900 (size 96): backtrace (crc 79c9c7ba): smb3_fs_context_fullpath+0x70/0x1b0 fs/smb/client/fs_context.c:629 smb3_fs_context_parse_param+0x2266/0x36c0 fs/smb/client/fs_context.c:1438

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from af1a3d2ba9543e99d78914d8fb88b61d0531d9a1 before 868fc62811d3fabcf5685e14f36377a855d5412d; from af1a3d2ba9543e99d78914d8fb88b61d0531d9a1 before 48c17341577e25a22feb13d694374b61d974edbc; from af1a3d2ba9543e99d78914d8fb88b61d0531d9a1 before 4515743cc7a42e1d67468402a6420c195532a6fa; from af1a3d2ba9543e99d78914d8fb88b61d0531d9a1 before e8c73eb7db0a498cd4b22d2819e6ab1a6f506bd6	CNA record

References

References

https://git.kernel.org/stable/c/868fc62811d3fabcf5685e14f36377a855d5412d
https://git.kernel.org/stable/c/48c17341577e25a22feb13d694374b61d974edbc
https://git.kernel.org/stable/c/4515743cc7a42e1d67468402a6420c195532a6fa
https://git.kernel.org/stable/c/e8c73eb7db0a498cd4b22d2819e6ab1a6f506bd6

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.