The vulnerability of the smb2_read() function in the fs/smb/server/smb2pdu.c module of the SMB server support module in the Linux operating system allows a hacker to cause a service failure.

🗓️ 28 Jun 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The smb2_read vulnerability in Linux SMB server leaks memory due to improper release, risking failure.

Reporter	Title	Published	Views	Family All 175
ATTACKERKB	CVE-2025-40286	6 Dec 202521:51	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Linux 6.1	19 Jun 202611:10	–	astralinux
Circl	CVE-2025-40286	6 Dec 202523:37	–	circl
CNNVD	Linux kernel 安全漏洞	6 Dec 202500:00	–	cnnvd
CVE	CVE-2025-40286	6 Dec 202521:51	–	cve
Cvelist	CVE-2025-40286 smb/server: fix possible memory leak in smb2_read()	6 Dec 202521:51	–	cvelist
Debian	[SECURITY] [DLA 4436-1] linux-6.1 security update	14 Jan 202613:50	–	debian
Debian CVE	CVE-2025-40286	6 Dec 202521:51	–	debiancve
Tenable Nessus	Debian dla-4436 : linux-config-6.1 - security update	14 Jan 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2025-5.0-0708	10 Dec 202500:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
git	www.git.kernel.org/stable/c/0797c6cf3b857cc229ab2bc69552938dcd738d78
git	www.git.kernel.org/stable/c/63d8706a2c09a0c29b8b0e8a44bc7a1339685de9
git	www.git.kernel.org/stable/c/f1305587731886da37a214cda812ade246c653b0
git	www.git.kernel.org/stable/c/bfda5422a16651d0bf864ec468b1c216e1b10d91
git	www.git.kernel.org/linus/6fced056d2cc8d01b326e6fcfabaacb9850b71a4
lore	www.lore.kernel.org/linux-cve-announce/2025120718-CVE-2025-40286-1b9c@gregkh/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2025-40286
web	www.web.nvd.nist.gov/view/vuln/detail

28 Jun 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.6

CVSS 35.5

EPSS0.00171

memory leak linux smb server improper release smb2 read