CVE-2025-71153: ksmbd: Fix memory leak in get_file_all_info()
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Fix memory leak in getfileallinfo()
In getfileallinfo(), if vfsgetattr() fails, the function returns immediately without freeing the allocated filename, leading to a memory leak.
Fix this by freeing the filename before returning in this error case.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In ksmbd's get_file_all_info(), free the allocated filename before returning when vfs_getattr() fails.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71153?
CVE-2025-71153 is classified as a moderate severity vulnerability due to the potential for a memory leak affecting kernel efficiency.
How do I fix CVE-2025-71153?
To fix CVE-2025-71153, you should update the Linux kernel to the latest version that addresses this memory leak.
What systems are affected by CVE-2025-71153?
CVE-2025-71153 affects versions of the Linux kernel using the ksmbd server implementation.
What type of vulnerability is CVE-2025-71153?
CVE-2025-71153 is a memory leak vulnerability occurring in the get_file_all_info function within the Linux kernel.
Is CVE-2025-71153 a critical vulnerability?
CVE-2025-71153 is not considered critical but may impact system performance if exploited.