CVE-2025-71220

smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()

HIGH

7.8

CVSS Score

Published: February 14, 2026 at 04:27 PM UTC

Updated: June 17, 2026 at 10:03 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() When ksmbd_iov_pin_rsp() fails, we should call ksmbd_session_rpc_close().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.15.145 ≤ v < 5.15.2006.1.71 ≤ v < 6.1.1636.13 ≤ v < 6.18.106.6 ≤ v < 6.12.706.6 ≤ v < 6.18.106.6 ≤ v < 6.196.6 ≤ v < 6.6.1246.7 ≤ v < 6.12.705.15.145 6.1.71 6.19 rc1 6.19 rc2 6.19 rc3 6.69f297df20d93411c0b4ddad7f88ba04a7cd36e77e2b76ab8b5c9327ab2dae6da05d0752eb2f4771df2283680a80571ca82d710bc6ecd8f8beac67d63

Vendor states this is fixed in 04dd114b682a4ccaeba2c2bad049c8b50ce740d8 (fixed)

Vendor states this is fixed in 2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29 (fixed)

Vendor states this is fixed in 7c28f8eef5ac5312794d8a52918076dcd787e53b (fixed)

Vendor states this is fixed in a2c68e256fb7a4ac34154c6e865a1389acca839f (fixed)

Vendor states this is fixed in ac18761b530b5dd40f59af8a25902282e5512854 (fixed)

Vendor states this is fixed in fdda836fcee6fdbcccc24e3679097efb583f581f (fixed)

Vendor states this is fixed in 5.15.200 (unaffected)

Vendor states this is fixed in 6.1.163 (unaffected)

Vendor states this is fixed in 6.12.70 (unaffected)

Vendor states this is fixed in 6.18.10 (unaffected)

Vendor states this is fixed in 6.19 (unaffected)

Vendor states this is fixed in 6.6 (unaffected)