CVE-2025-39720: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix refcount leak causing resource not released When ksmbd_conn_releasing(opinfo->conn) returns true,the refcount was not decremented properly, causing a refcount leak that prevents the count from reaching zero and the memory from being released.

Affected products

• Linux Linux Kernel: from 5.15, before 6.6.103 (fixed in 6.6.103); from 6.7, before 6.12.44 (fixed in 6.12.44); from 6.13, before 6.16.4 (fixed in 6.16.4); version 6.17 only

Published 2025-09-05. Last modified 2026-07-30.