VULNERABILITY INTELLIGENCE

CVE-2025-39929

CVSS score5.5 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2025-10-04
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path During tests of another unrelated patch I was able to trigger this error: Objects remaining on __kmem_cache_shutdown()

Weakness classification

  • CWE-401: Missing Release of Memory after Effective Lifetime

Primary references