CVE-2025-71220

HighCVSS 7.8/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()

When ksmbd_iov_pin_rsp() fails, we should call ksmbd_session_rpc_close().

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= f2283680a80571ca82d710bc6ecd8f8beac67d63, < a2c68e256fb7a4ac34154c6e865a1389acca839f; >= 9f297df20d93411c0b4ddad7f88ba04a7cd36e77, < 2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29; >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d, < 04dd114b682a4ccaeba2c2bad049c8b50ce740d8; >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d, < ac18761b530b5dd40f59af8a25902282e5512854; >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d, < fdda836fcee6fdbcccc24e3679097efb583f581f; >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d, < 7c28f8eef5ac5312794d8a52918076dcd787e53b; >= 5.15.145, < 5.15.200; >= 6.1.71, < 6.1.163
LinuxLinux6.6

References

Timeline

Published
Feb 14, 2026
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-712217.0In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Add propCVE-2025-712225.5In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: ensure skb headroom before skb_push This avoids occasionCVE-2025-712235.5In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in smb2_open() When ksmbd_vfs_getattr() CVE-2025-71224In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ocb: skip rx_no_sta when interface is not joined ieee8CVE-2025-712255.3In the Linux kernel, the following vulnerability has been resolved: md: suspend array while updating raid_disks via sysfs In raid1_reshapeCVE-2025-712275.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't WARN for connections on invalid channels It's noCVE-2025-712295.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() rtw_core_CVE-2025-71237.2A vulnerability was found in Campcodes Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown proceCVE-2025-712305.5In the Linux kernel, the following vulnerability has been resolved: hfs: ensure sb->s_fs_info is always cleaned up When hfs was converted CVE-2025-712317.1In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_modCVE-2025-712325.5In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Free sp in error path to fix system crash System crash CVE-2025-712335.5In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchrono
CVE-2025-71220: High severity, CVSS 7.8 | Vulnix