CVE-2026-90125

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A request buffer leak exists in the asynchronous read path of the SMB client. The function smb2 new read req() allocates a request buffer using smb2 plain req init(), but fails to release this buffer or return it to the caller when certain error conditions occur before the final assignment. Specifically, if the function returns -ECONNABORTED or -EAGAIN (which occurs during memory registration failure via smbd register mr()), the buffer is leaked. Because -EAGAIN is a replayable error, repeated retry attempts in smb2 async readv() can lead to multiple buffer leaks. This issue does not affect the synchronous SMB2 read() path or the write path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.