Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-71151

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory and information leak in smb3_reconfigure() In smb3_reconfigure(), if smb3_sync_session_ctx_passwords() fails, the function returns immediately without freeing and erasing the newly allocated new_password and new_password2. This causes both a memory leak and a potential information leak. Fix this by calling kfree_sensitive() on both password buffers before returning in this error case.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a7475bf6b1703d4f4fd2a204dda6345748b8baee9b3aa8b583fcc770944d6407
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/client/fs_context.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"bc390b2737205163e48cc1655f6a0c8cd55b02fc","status":"affected","version":"880a661e67648a3ffe85405e8de5f50650a3c0b2","versionType":"git"},{"lessThan":"5679cc90bb5415801fa29041da0319d9e15d295d","status":"affected","version":"0e4145774c016530bf99afb3675a1a0593c35642","versionType":"git"},{"lessThan":"bb82aaee16907dc4d0b9b0ca7953ceb3edc328c6","status":"affected","version":"0f0e357902957fba28e…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:edf4a39af72183c685f0d32e28208362747eddbe6dcce611d65a50f92be1044e · sha256:f8e7c91933bb1721… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/client/fs_context.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.120","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.64","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.3","versionType":"semver"},{"lessT…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:edf4a39af72183c685f0d32e28208362747eddbe6dcce611d65a50f92be1044e · sha256:f8e7c91933bb1721… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/client/fs_context.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"bc390b2737205163e48cc1655f6a0c8cd55b02fc","status":"affected","version":"880a661e67648a3ffe85405e8de5f50650a3c0b2","versionType":"git"},{"lessThan":"5679cc90bb5415801fa29041da0319d9e15d295d","status":"affected","version":"0e4145774c016530bf99afb3675a1a0593c35642","versionType":"git"},{"lessThan":"bb82aaee16907dc4d0b9b0ca7953ceb3edc328c6","status":"affected","version":"0f0e357902957fba28e…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:edf4a39af72183c685f0d32e28208362747eddbe6dcce611d65a50f92be1044e · sha256:f8e7c91933bb1721… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/client/fs_context.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.120","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.64","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.3","versionType":"semver"},{"lessT…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:edf4a39af72183c685f0d32e28208362747eddbe6dcce611d65a50f92be1044e · sha256:f8e7c91933bb1721… · /containers/cna/affected/1

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/5679cc90bb5415801fa29041da0319d9e15d295d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:edf4a39af72183c685f0d32e28208362747eddbe6dcce611d65a50f92be1044e · sha256:f8e7c91933bb1721… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/bb82aaee16907dc4d0b9b0ca7953ceb3edc328c6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:edf4a39af72183c685f0d32e28208362747eddbe6dcce611d65a50f92be1044e · sha256:f8e7c91933bb1721… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/bc390b2737205163e48cc1655f6a0c8cd55b02fc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:edf4a39af72183c685f0d32e28208362747eddbe6dcce611d65a50f92be1044e · sha256:f8e7c91933bb1721… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/cb6d5aa9c0f10074f1ad056c3e2278ad2cc7ec8d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:edf4a39af72183c685f0d32e28208362747eddbe6dcce611d65a50f92be1044e · sha256:f8e7c91933bb1721… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer