CVE Database
/

CVE-2025-68295

Back to search

CVE-2025-68295

Published: Dec 16, 2025

Modified: May 23, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix memory leak in cifs_construct_tcon() When having a multiuser mount with domain= specified and using cifscreds, cifs_set_cifscreds() will end up setting @ctx->domainname, so it needs to be freed before leaving cifs_construct_tcon(). This fixes the following memory leak reported by kmemleak: mount.cifs //srv/share /mnt -o domain=ZELDA,multiuser,... su - testuser cifscreds add -d ZELDA -u testuser ... ls /mnt/1 ... umount /mnt echo scan > /sys/kernel/debug/kmemleak cat /sys/kernel/debug/kmemleak unreferenced object 0xffff8881203c3f08 (size 8): comm "ls", pid 5060, jiffies 4307222943 hex dump (first 8 bytes): 5a 45 4c 44 41 00 cc cc ZELDA... backtrace (crc d109a8cf): __kmalloc_node_track_caller_noprof+0x572/0x710 kstrdup+0x3a/0x70 cifs_sb_tlink+0x1209/0x1770 [cifs] cifs_get_fattr+0xe1/0xf50 [cifs] cifs_get_inode_info+0xb5/0x240 [cifs] cifs_revalidate_dentry_attr+0x2d1/0x470 [cifs] cifs_getattr+0x28e/0x450 [cifs] vfs_getattr_nosec+0x126/0x180 vfs_statx+0xf6/0x220 do_statx+0xab/0x110 __x64_sys_statx+0xd5/0x130 do_syscall_64+0xbb/0x380 entry_SYSCALL_64_after_hwframe+0x77/0x7f

VendorProductVersions

Linux

Linux

affected
f2aee329a68f5a907bcff11a109dfe17c0b41aeb - < ff8f9bd1c46ee02d5558293915d42e82646d5ee9
affected
f2aee329a68f5a907bcff11a109dfe17c0b41aeb - < d146e96fef876492979658dce644305de35878d4
affected
f2aee329a68f5a907bcff11a109dfe17c0b41aeb - < 3dd546e867e94c2f954bca45a961b6104ba708b6
affected
f2aee329a68f5a907bcff11a109dfe17c0b41aeb - < f62ffdfb431bdfa4b6d24233b7fd830eca0b801e
affected
f2aee329a68f5a907bcff11a109dfe17c0b41aeb - < f15288c137d960836277d0e3ecc62de68e52f00f

+12 more versions

Linux

Linux

affected
5.3
unaffected
0 - < 5.3
unaffected
5.10.247 - <= 5.10.*
unaffected
5.15.197 - <= 5.15.*
unaffected
6.1.159 - <= 6.1.*

+4 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now