CVE-2025-71220

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-02-14 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() When ksmbd_iov_pin_rsp() fails, we should call ksmbd_session_rpc_close().

Affected Software (13)

VendorProductVersion
Linux Linux f2283680a80571ca82d710bc6ecd8f8beac67d63 < a2c68e256fb7a4ac34154c6e865a1389acca839f
Linux Linux 9f297df20d93411c0b4ddad7f88ba04a7cd36e77 < 2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29
Linux Linux e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d < 04dd114b682a4ccaeba2c2bad049c8b50ce740d8
Linux Linux e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d < ac18761b530b5dd40f59af8a25902282e5512854
Linux Linux e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d < fdda836fcee6fdbcccc24e3679097efb583f581f
Linux Linux e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d < 7c28f8eef5ac5312794d8a52918076dcd787e53b
Linux Linux 5.15.145 < 5.15.200
Linux Linux 6.1.71 < 6.1.163
Linux Linux 6.6
linux linux_kernel 5.15.145 – 5.15.200
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.15%
Raw Score 0.001520
Percentile 4.4%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00152
2026-11-05
0.00152

Intelligence Sources

mitre ref →
nvd ref →