Linux Kernel CIFS Memory Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's CIFS (Common Internet File System) implementation. This issue arises during the handling of deferred close operations, where certain objects are not properly released, leading to a memory leak. The problem has been observed in conjunction with xfstests, specifically in the smb21 suite, which reported the unreferenced object through the kernel's memory leak detector. The backtrace included in the report indicates that the leak occurs when canceling the deferred close work, highlighting the need to clean up the associated structures.

Impact

The vulnerability leads to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.

Added: Jun 18, 2025, 6:08 PM
Updated: Jun 18, 2025, 6:08 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.