CVE-2025-39819

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential inconsistent update of the reference count was identified in the smb2 compound op function. This inconsistency could lead to resource leaks. The issue arises because the reference to cfile is not always dropped after calling the function, specifically when an error occurs during memory allocation for vars. The fix introduces an additional goto label ("out") to ensure cleanup logic is always executed, even in cases of memory allocation failure. The error code "-ENOMEM" is considered non-recoverable, and replay logic is ignored.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.