In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix possible memory leak in smb2_lock()
argv needs to be free when setup_async_work fails or when the current process is woken up.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Ubuntu | — | Upgrade linux-ibm-5.15Upgrade linux-gcpUpgrade linux-riscv-5.15Upgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-fipsUpgrade linux-intel-iotgUpgrade linux-intel-iotg-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-awsUpgrade linux-kvmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-oracle-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-nvidiaUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-aws-fipsUpgrade linux-azure-5.15Upgrade linux-aws-5.15Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-gkeUpgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-nvidia-tegraUpgrade linuxUpgrade linux-azure | Jan 6, 2026 | Jan 2, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub