CVE-2025-71151: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory and information leak in smb3_reconfigure() In smb3_reconfigure(), if smb3_sync_session_ctx_passwords() fails, the function returns immediately without freeing and erasing the newly allocated new_password and new_password2. This causes both a memory leak and a potential information leak. Fix this by calling kfree_sensitive() on both password buffers before returning in this error case.

Засегнати продукти

• Linux Linux: 880a661e67648a3ffe85405e8de5f50650a3c0b2 преди bc390b2737205163e48cc1655f6a0c8cd55b02fc; 0e4145774c016530bf99afb3675a1a0593c35642 преди 5679cc90bb5415801fa29041da0319d9e15d295d; 0f0e357902957fba28ed31bde0d6921c6bd1485d преди bb82aaee16907dc4d0b9b0ca7953ceb3edc328c6; 0f0e357902957fba28ed31bde0d6921c6bd1485d преди cb6d5aa9c0f10074f1ad056c3e2278ad2cc7ec8d; 674ba43944dab8e8f87434e25d9d10c5152584bc; 6.6.64 преди 6.6.120; 6.12.2 преди 6.12.64; 6.11.11 преди 6.12
• Linux Linux: 6.13; преди 6.13; 6.6.120 до 6.6.*; 6.12.64 до 6.12.*; 6.18.3 до 6.18.*; 6.19 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-71151
• https://nvd.nist.gov/vuln/detail/CVE-2025-71151
• https://git.kernel.org/stable/c/bc390b2737205163e48cc1655f6a0c8cd55b02fc
• https://git.kernel.org/stable/c/5679cc90bb5415801fa29041da0319d9e15d295d
• https://git.kernel.org/stable/c/bb82aaee16907dc4d0b9b0ca7953ceb3edc328c6
• https://git.kernel.org/stable/c/cb6d5aa9c0f10074f1ad056c3e2278ad2cc7ec8d