CVE-2025-40285

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A reference count leak exists in the smb2 sess setup() function within the SMB server component of the Linux kernel. Specifically, the reference count of ksmbd session can leak when a session requires reconnection. This is addressed by adding the missing ksmbd user session put() function call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.