CVE-2025-37962

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
20/05/2025
Last modified:
21/05/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ksmbd: fix memory leak in parse_lease_state()<br /> <br /> The previous patch that added bounds check for create lease context<br /> introduced a memory leak. When the bounds check fails, the function<br /> returns NULL without freeing the previously allocated lease_ctx_info<br /> structure.<br /> <br /> This patch fixes the issue by adding kfree(lreq) before returning NULL<br /> in both boundary check cases.

Impact