CVE-2025-40286 addresses a memory leak vulnerability within the Linux kernel's SMB server (ksmbd) component, specifically in the smb2_read() function when ksmbd_vfs_read() fails. While a CVSS score is not available, its FAUCET Risk Score is 7/100, indicating a low-to-moderate risk. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 5.15CNA affecteddefault affected | |
| Linux | Linux | >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 0797c6cf3b857cc229ab2bc69552938dcd738d78, >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 63d8706a2c09a0c29b8b0e8a44bc7a1339685de9, >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 6fced056d2cc8d01b326e6fcfabaacb9850b71a4, >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < bfda5422a16651d0bf864ec468b1c216e1b10d91, >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < f1305587731886da37a214cda812ade246c653b0CNA affecteddefault unaffected |
CVSS data has not been published for this CVE.
Linux kernel (Xilinx) vulnerabilities
May 7, 2026Linux kernel (Azure FIPS) vulnerabilities
Apr 9, 2026Linux kernel (Raspberry Pi) vulnerabilities
Apr 1, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (AWS) vulnerabilities
Mar 23, 2026Linux kernel (Real-time) vulnerabilities
Mar 17, 2026Linux kernel (FIPS) vulnerabilities
Mar 16, 2026Linux kernel (NVIDIA) vulnerabilities
Mar 16, 2026Linux kernel vulnerabilities
Mar 16, 2026Linux kernel (Azure) vulnerabilities
Feb 24, 2026smb/server: fix possible memory leak in smb2_read()
Dec 9, 2025kernel: smb/server: fix possible memory leak in smb2_read()
Dec 6, 2025