CVE-2025-71151

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the smb3 reconfigure() function. Specifically, if the smb3 sync session ctx passwords() function fails, the function prematurely returns without releasing allocated memory for new password and new password2, leading to both a memory leak and a potential information leak. The fix involves calling kfree sensitive() on both password buffers before returning in the error case.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.