CVE-2025-71150

CVE-2025-71150 relates to a Linux kernel KSMD (ksmbd) refcount leak: when a session is found during session lookup but SMB2_SESSION_VALID is not set, the reference count for that session is not decremented. The patch fixes this by explicitly calling ksmbd_user_session_put to release the reference...

CVE-2025-71150 ksmbd: Fix refcount leak when invalid session is found on session lookup

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix refcount leak when invalid session is found on session lookup When a session is found but its state is not SMB2SESSIONVALID, It indicates that no valid session was found, but it is missing to decrement the reference...

CVE-2025-71150

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix refcount leak when invalid session is found on session lookup When a session is found but its state is not SMB2SESSIONVALID, It indicates that no valid session was found, but it is missing to decrement the reference...

Linux Distros Unpatched Vulnerability : CVE-2025-71153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in getfileallinfo In getfileallinfo, if vfsgetattr fails, the functio...

Linux Distros Unpatched Vulnerability : CVE-2025-71150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: Fix refcount leak when invalid session is found on session lookup When a session is found but its state is not SMB2SESSIONVALID, It indicates that no val...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57925)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57925 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21947)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21947 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix type confusion via race...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37947)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37947 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writ...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38191)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38191 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38092)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38092 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: use listfirstentryornull for...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37952)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37952 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in closefiletableids A...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22041)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22041 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37956)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37956 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21967)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21967 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22040)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22040 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21748)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21748 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57895)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57895 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: set ATTRCTIME flags when setting...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22043)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22043 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: add bounds check for durable hand...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37778)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37778 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22038)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22038 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero numsubauth before...