CVE-2025-71150: ksmbd: Fix refcount leak when invalid session is found on session lookup
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Fix refcount leak when invalid session is found on session lookup
When a session is found but its state is not SMB2SESSIONVALID, It indicates that no valid session was found, but it is missing to decrement the reference count acquired by the session lookup, which results in a reference count leak. This patch fixes the issue by explicitly calling ksmbdusersessionput to release the reference to the session.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71150?
CVE-2025-71150 is classified as a medium severity vulnerability.
How do I fix CVE-2025-71150?
To address CVE-2025-71150, you should update to the latest version of the Linux kernel that resolves this refcount leak issue.
What systems are affected by CVE-2025-71150?
CVE-2025-71150 affects the Linux kernel, particularly those utilizing the ksmbd SMB file server implementation.
What does CVE-2025-71150 exploit?
CVE-2025-71150 exploits a refcount leak that occurs when an invalid session is found during session lookup.
Is CVE-2025-71150 a remote or local vulnerability?
CVE-2025-71150 is considered a local vulnerability as it typically requires access to the system to exploit.