CVE-2025-68246

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's ksmbd module where a socket is leaked when the per-IP connection limit is exceeded during connection attempts. Specifically, when ksmbd kthread fn() encounters a connection limit, it sets a return value indicating a temporary failure but fails to close the accepted socket before continuing the accept loop. This results in a socket leak for each rejected connection attempt from a single IP address, potentially leading to a denial-of-service condition. The issue was discovered by ZeroPath.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.