CVE-2025-40320

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the Server Message Block (SMB) client implementation, specifically in the smb2 query info compound function. A use-after-free condition can occur when the function retries an operation, potentially acting on a stale pointer if a previously allocated context ID (cfid) has been freed during the first attempt. This can lead to system instability. The issue is triggered when cfid is not reset to NULL upon replay. A trace indicates a refcount underflow and use-after-free occurring at refcount warn saturate.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.