CVE-2025-68295

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak in the cifs construct tcon() function within the SMB client implementation. This leak occurs when a multiuser mount is used with a specified domain and cifscreds. Specifically, the domainname is not freed before exiting cifs construct tcon(). The issue was identified through kmemleak analysis during testing with a CIFS mount, user switching, credential addition, and subsequent unmounting. The vulnerable function is cifs construct tcon().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.