CVE-2025-71223: smb/server: fix refcount leak in smb2_open()
In the Linux kernel, the following vulnerability has been resolved:
smb/server: fix refcount leak in smb2open()
When ksmbdvfsgetattr() fails, the reference count of ksmbdfile must be released.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71223?
CVE-2025-71223 has been assessed as a moderate severity vulnerability due to the potential impact on system stability.
How do I fix CVE-2025-71223?
To fix CVE-2025-71223, upgrade to a patched version of the Linux kernel where the refcount leak issue in smb2_open() has been resolved.
What does CVE-2025-71223 affect?
CVE-2025-71223 affects the SMB server component in the Linux kernel.
What are the consequences of not addressing CVE-2025-71223?
Failing to address CVE-2025-71223 could lead to stability issues, such as kernel crashes or data corruption.
Is CVE-2025-71223 related to the SMB protocol?
Yes, CVE-2025-71223 specifically involves a vulnerability in the SMB2 implementation within the Linux kernel.