cve/2025/CVE-2025-37962.md
2025-09-29 21:09:30 +02:00

1.8 KiB

CVE-2025-37962

Description

In the Linux kernel, the following vulnerability has been resolved:ksmbd: fix memory leak in parse_lease_state()The previous patch that added bounds check for create lease contextintroduced a memory leak. When the bounds check fails, the functionreturns NULL without freeing the previously allocated lease_ctx_infostructure.This patch fixes the issue by adding kfree(lreq) before returning NULLin both boundary check cases.

POC

Reference

No PoCs from references.

Github