CVE-2025-37962
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
ksmbd: fix memory leak in parse_lease_state()
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The previous patch that added bounds check for create lease context introduced a memory leak. When the bounds check fails, the function returns NULL without freeing the previously allocated lease_ctx_info structure. This patch fixes the issue by adding kfree(lreq) before returning NULL in both boundary check cases.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 629dd37acc336ad778979361c351e782053ea284 | affected | git | facf22c1a394c1e023dab5daf9a494f722771e1c | Unavailable | None listed |
| 60b7207893a8a06c78441934931a08fdad63f18e | affected | git | af9e2d4732a548db8f6f5a90c2c20a789a3d7240 | Unavailable | None listed |
| 800c482c9ef5910f05e3a713943c67cc6c1d4939 | affected | git | 2148d34371b06dac696c0497a98a6bf905a51650 | Unavailable | None listed |
| 9a1b6ea955e6c7b29939a6d98701202f9d9644ec | affected | git | 829e19ef741d9e9932abdc3bee5466195e0852cf | Unavailable | None listed |
| bab703ed8472aa9d109c5f8c1863921533363dae | affected | git | eb4447bcce915b43b691123118893fca4f372a8f | Unavailable | None listed |
| a41cd52f00907a040ca22c73d4805bb79b0d0972 | affected | git | Unavailable | Unavailable | None listed |
| 6.13.11 | affected | semver | 6.14 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.1.134 | affected | semver | 6.1.139 | Unavailable | None listed |
| 6.6.87 | affected | semver | 6.6.91 | Unavailable | None listed |
| 6.12.23 | affected | semver | 6.12.29 | Unavailable | None listed |
| 6.14.2 | affected | semver | 6.14.7 | Unavailable | None listed |