CVE-2025-71220

EUVD-2025-206990
In the Linux kernel, the following vulnerability has been resolved:

smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()

When ksmbd_iov_pin_rsp() fails, we should call ksmbd_session_rpc_close().
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
5.15.145 ≤
𝑥
< 5.15.200
linuxlinux_kernel
6.1.71 ≤
𝑥
< 6.1.163
linuxlinux_kernel
6.6 ≤
𝑥
< 6.6.124
linuxlinux_kernel
6.7 ≤
𝑥
< 6.12.70
linuxlinux_kernel
6.13 ≤
𝑥
< 6.18.10
linuxlinux_kernel
6.19:rc1
linuxlinux_kernel
6.19:rc2
linuxlinux_kernel
6.19:rc3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
vulnerable
bookworm (security)
6.1.164-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.251-1
fixed
forky
6.19.10-1
fixed
sid
6.19.11-1
fixed
trixie
6.12.73-1
fixed
trixie (security)
6.12.74-2
fixed
linux-6.1
bullseye
not-affected
bullseye (security)
6.1.164-1~deb11u1
fixed
Vulnerability Media Exposure
References
https://git.kernel.org/stable/c/04dd114b682a4ccaeba2c2bad049c8b50ce740d8
https://git.kernel.org/stable/c/2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29
https://git.kernel.org/stable/c/7c28f8eef5ac5312794d8a52918076dcd787e53b
https://git.kernel.org/stable/c/a2c68e256fb7a4ac34154c6e865a1389acca839f
https://git.kernel.org/stable/c/ac18761b530b5dd40f59af8a25902282e5512854
https://git.kernel.org/stable/c/fdda836fcee6fdbcccc24e3679097efb583f581f