In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix smbd connection leak on cifs get tcp session() error

When an RDMA connection is successfully established via smbd get connection() but cifs get tcp session() later fails (e.g. kthread create() returns an error), the error path frees tcp ses without first destroying the smbd connection.

Fix this by calling smbd destroy() in the out err cleanup path before kfree(tcp ses). smbd destroy() safely handles the case where smbd conn is NULL, so it can be called unconditionally.