Answer in brief
CVE-2025-68219 records a Unknown severity vulnerability in cifs: fix memory leak in smb3_fs_context_parse_param error path. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=24e0a1eff9e2b9835a6e7c17039dfb6ecfd81f1f <a8071fd69df335362be5ecf5df5a167fd1eb5853 || >=24e0a1eff9e2b9835a6e7c17039dfb6ecfd81f1f <7627864dc3121f39e220f5253a227edf472de59e || >=24e0a1eff9e2b9835a6e7c17039dfb6ecfd81f1f <48d69290270891f988e72edddd9688c20515421d || >=24e0a1eff9e2b9835a6e7c17039dfb6ecfd81f1f <37010021d7e0341bb241ca00bcbae31f2c50b23f || >=24e0a1eff9e2b9835a6e7c17039dfb6ecfd81f1f <7e4d9120cfa413dd34f4f434befc5dbe6c38b2e5 | a8071fd69df335362be5ecf5df5a167fd1eb5853, 7627864dc3121f39e220f5253a227edf472de59e, 48d69290270891f988e72edddd9688c20515421d, 37010021d7e0341bb241ca00bcbae31f2c50b23f, 7e4d9120cfa413dd34f4f434befc5dbe6c38b2e5 |
| Linux/Linuxgeneric | 5.11 | Not reported |
Published upstream
Dec 16, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 30, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 22, 2026
In the Linux kernel, the following vulnerability has been resolved: cifs: fix memory leak in smb3_fs_context_parse_param error path Add proper cleanup of ctx->source and fc->source to the cifs_parse_mount_err error handler. This ensures that memory allocated for the source strings is correctly freed on all error paths, matching the cleanup already performed in the success path by smb3_cleanup_fs_context_contents(). Pointers are also set to NULL after freeing to prevent potential double-free issues. This change fixes a memory leak originally detected by syzbot. The leak occurred when processing Opt_source mount options if an error happened after ctx->source and fc->source were successfully allocated but before the function completed. The specific leak sequence was: 1. ctx->source = smb3_fs_context_fullpath(ctx, '/') allocates memory 2. fc->source = kstrdup(ctx->source, GFP_KERNEL) allocates more memory 3. A subsequent error jumps to cifs_parse_mount_err 4. The old error handler freed passwords but not the source strings, causing the memory to leak. This issue was not addressed by commit e8c73eb7db0a ("cifs: client: fix memory leak in smb3_fs_context_parse_param"), which only fixed leaks from repeated fsconfig() calls but not this error path. Patch updated with minor change suggested by kernel test robot
Quoted source text, attributed separately from HOL analysis.