In the Linux kernel, the following vulnerability has been resolved:
smb: client: Fix refcount leak for cifssbtlink
Fix three refcount inconsistency issues related to cifs_sb_tlink.
Comments for cifs_sb_tlink state that cifs_put_tlink() needs to be
called after successful calls to cifs_sb_tlink(). Three calls fail to
update refcount accordingly, leading to possible resource leaks.
[
{
"id": "CVE-2025-40103-0b5b7dbf",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/inode.c",
"function": "cifs_do_rename"
},
"digest": {
"function_hash": "194879880053300052241530722122865559875",
"length": 1531.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c2b77f42205ef485a647f62082c442c1cd69d3fc"
},
{
"id": "CVE-2025-40103-12ed7a28",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/smb2ops.c",
"function": "get_smb2_acl_by_path"
},
"digest": {
"function_hash": "204936359184361761796012724319234799531",
"length": 1290.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c2b77f42205ef485a647f62082c442c1cd69d3fc"
},
{
"id": "CVE-2025-40103-1ca0d934",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/smb2ops.c",
"function": "get_smb2_acl_by_path"
},
"digest": {
"function_hash": "204936359184361761796012724319234799531",
"length": 1290.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7dd034c14928306db1b46be277ae439b84dacf9"
},
{
"id": "CVE-2025-40103-2bdf8274",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/inode.c",
"function": "cifs_do_rename"
},
"digest": {
"function_hash": "178075504145115723360889537534076703401",
"length": 1411.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@790282abe9d805f08618c1c24ea2529e7259b692"
},
{
"id": "CVE-2025-40103-308969a5",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/smb/client/inode.c"
},
"digest": {
"line_hashes": [
"304636178711413409639913081618152681628",
"244506659194713913003706868320697443574",
"299560067655357583485721851672866202909",
"94548223035742013573742467222075888811",
"283766123102421609732546732450245430665"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7dd034c14928306db1b46be277ae439b84dacf9"
},
{
"id": "CVE-2025-40103-34fa072b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/inode.c",
"function": "cifs_do_rename"
},
"digest": {
"function_hash": "57185462496979242513945254431197478252",
"length": 1419.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e15605b68b490186da2ad8029c0351a9cfb0b9af"
},
{
"id": "CVE-2025-40103-382debb1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/smb2ops.c",
"function": "set_smb2_acl"
},
"digest": {
"function_hash": "174558813684710615714535037842425245578",
"length": 1268.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e15605b68b490186da2ad8029c0351a9cfb0b9af"
},
{
"id": "CVE-2025-40103-4130e6d3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/inode.c",
"function": "cifs_do_rename"
},
"digest": {
"function_hash": "57185462496979242513945254431197478252",
"length": 1419.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7dd034c14928306db1b46be277ae439b84dacf9"
},
{
"id": "CVE-2025-40103-4696874f",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/smb2ops.c",
"function": "set_smb2_acl"
},
"digest": {
"function_hash": "174558813684710615714535037842425245578",
"length": 1268.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@896bb31e1416f582503db1350cf1bd10dc64e5a6"
},
{
"id": "CVE-2025-40103-4778a09b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/smb2ops.c",
"function": "get_smb2_acl_by_path"
},
"digest": {
"function_hash": "204936359184361761796012724319234799531",
"length": 1290.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e15605b68b490186da2ad8029c0351a9cfb0b9af"
},
{
"id": "CVE-2025-40103-4ba81aed",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/smb/client/smb2ops.c"
},
"digest": {
"line_hashes": [
"313147127985209345475377398548186866918",
"244261057809038125400299037730999486920",
"145567909860805955645558382377759066569",
"304563432369664231713941640268134473748",
"124322592623208067035507571233156017484",
"190797336620263551854081407247328141007",
"335977128707597520778010594082544573056",
"173639455171801144222526327847489052645",
"313147127985209345475377398548186866918",
"200284207511118318120141750140726840959",
"9247044592927876354549888734863740110",
"215263480408608667768719425663630823576",
"78376032513287530843850519141457175939",
"65248475849048512817373079020602539434",
"335977128707597520778010594082544573056",
"323912077386984658993232360035875123558"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@896bb31e1416f582503db1350cf1bd10dc64e5a6"
},
{
"id": "CVE-2025-40103-4cf04ba0",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/smb2ops.c",
"function": "set_smb2_acl"
},
"digest": {
"function_hash": "174558813684710615714535037842425245578",
"length": 1268.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@790282abe9d805f08618c1c24ea2529e7259b692"
},
{
"id": "CVE-2025-40103-55a3df40",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/smb/client/smb2ops.c"
},
"digest": {
"line_hashes": [
"313147127985209345475377398548186866918",
"244261057809038125400299037730999486920",
"145567909860805955645558382377759066569",
"304563432369664231713941640268134473748",
"124322592623208067035507571233156017484",
"190797336620263551854081407247328141007",
"335977128707597520778010594082544573056",
"173639455171801144222526327847489052645",
"313147127985209345475377398548186866918",
"200284207511118318120141750140726840959",
"9247044592927876354549888734863740110",
"215263480408608667768719425663630823576",
"78376032513287530843850519141457175939",
"65248475849048512817373079020602539434",
"335977128707597520778010594082544573056",
"323912077386984658993232360035875123558"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e15605b68b490186da2ad8029c0351a9cfb0b9af"
},
{
"id": "CVE-2025-40103-5f1ddac5",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/smb/client/inode.c"
},
"digest": {
"line_hashes": [
"304636178711413409639913081618152681628",
"244506659194713913003706868320697443574",
"24153745690959140933855139025388631000",
"156971051882777938003012875380265404656",
"312723732087663737260798492952600166397"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@790282abe9d805f08618c1c24ea2529e7259b692"
},
{
"id": "CVE-2025-40103-6a8b68d0",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/smb/client/inode.c"
},
"digest": {
"line_hashes": [
"304636178711413409639913081618152681628",
"244506659194713913003706868320697443574",
"299560067655357583485721851672866202909",
"94548223035742013573742467222075888811",
"283766123102421609732546732450245430665"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@896bb31e1416f582503db1350cf1bd10dc64e5a6"
},
{
"id": "CVE-2025-40103-6fba9e3d",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/smb2ops.c",
"function": "get_smb2_acl_by_path"
},
"digest": {
"function_hash": "204936359184361761796012724319234799531",
"length": 1290.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@896bb31e1416f582503db1350cf1bd10dc64e5a6"
},
{
"id": "CVE-2025-40103-81557680",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/smb2ops.c",
"function": "set_smb2_acl"
},
"digest": {
"function_hash": "174558813684710615714535037842425245578",
"length": 1268.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7dd034c14928306db1b46be277ae439b84dacf9"
},
{
"id": "CVE-2025-40103-864e5dc8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/smb/client/inode.c"
},
"digest": {
"line_hashes": [
"304636178711413409639913081618152681628",
"244506659194713913003706868320697443574",
"299560067655357583485721851672866202909",
"94548223035742013573742467222075888811",
"283766123102421609732546732450245430665"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e15605b68b490186da2ad8029c0351a9cfb0b9af"
},
{
"id": "CVE-2025-40103-90232fbf",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/smb2ops.c",
"function": "set_smb2_acl"
},
"digest": {
"function_hash": "174558813684710615714535037842425245578",
"length": 1268.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c2b77f42205ef485a647f62082c442c1cd69d3fc"
},
{
"id": "CVE-2025-40103-9479108c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/smb/client/smb2ops.c"
},
"digest": {
"line_hashes": [
"313147127985209345475377398548186866918",
"244261057809038125400299037730999486920",
"145567909860805955645558382377759066569",
"304563432369664231713941640268134473748",
"124322592623208067035507571233156017484",
"190797336620263551854081407247328141007",
"335977128707597520778010594082544573056",
"173639455171801144222526327847489052645",
"313147127985209345475377398548186866918",
"200284207511118318120141750140726840959",
"9247044592927876354549888734863740110",
"215263480408608667768719425663630823576",
"78376032513287530843850519141457175939",
"65248475849048512817373079020602539434",
"335977128707597520778010594082544573056",
"323912077386984658993232360035875123558"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7dd034c14928306db1b46be277ae439b84dacf9"
},
{
"id": "CVE-2025-40103-95fb2bb5",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/smb/client/inode.c"
},
"digest": {
"line_hashes": [
"304636178711413409639913081618152681628",
"244506659194713913003706868320697443574",
"299560067655357583485721851672866202909",
"94548223035742013573742467222075888811",
"283766123102421609732546732450245430665"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c2b77f42205ef485a647f62082c442c1cd69d3fc"
},
{
"id": "CVE-2025-40103-a296d550",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/inode.c",
"function": "cifs_do_rename"
},
"digest": {
"function_hash": "194879880053300052241530722122865559875",
"length": 1531.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@896bb31e1416f582503db1350cf1bd10dc64e5a6"
},
{
"id": "CVE-2025-40103-b09abaa3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/smb/client/smb2ops.c"
},
"digest": {
"line_hashes": [
"313147127985209345475377398548186866918",
"244261057809038125400299037730999486920",
"145567909860805955645558382377759066569",
"304563432369664231713941640268134473748",
"124322592623208067035507571233156017484",
"190797336620263551854081407247328141007",
"335977128707597520778010594082544573056",
"173639455171801144222526327847489052645",
"313147127985209345475377398548186866918",
"200284207511118318120141750140726840959",
"9247044592927876354549888734863740110",
"215263480408608667768719425663630823576",
"78376032513287530843850519141457175939",
"65248475849048512817373079020602539434",
"335977128707597520778010594082544573056",
"323912077386984658993232360035875123558"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c2b77f42205ef485a647f62082c442c1cd69d3fc"
},
{
"id": "CVE-2025-40103-cbb4f64c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/smb/client/smb2ops.c",
"function": "get_smb2_acl_by_path"
},
"digest": {
"function_hash": "204936359184361761796012724319234799531",
"length": 1290.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@790282abe9d805f08618c1c24ea2529e7259b692"
},
{
"id": "CVE-2025-40103-ce67cd92",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/smb/client/smb2ops.c"
},
"digest": {
"line_hashes": [
"313147127985209345475377398548186866918",
"244261057809038125400299037730999486920",
"145567909860805955645558382377759066569",
"304563432369664231713941640268134473748",
"124322592623208067035507571233156017484",
"190797336620263551854081407247328141007",
"335977128707597520778010594082544573056",
"173639455171801144222526327847489052645",
"313147127985209345475377398548186866918",
"200284207511118318120141750140726840959",
"9247044592927876354549888734863740110",
"215263480408608667768719425663630823576",
"78376032513287530843850519141457175939",
"65248475849048512817373079020602539434",
"335977128707597520778010594082544573056",
"323912077386984658993232360035875123558"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@790282abe9d805f08618c1c24ea2529e7259b692"
}
]