CVE WatchJul 30, 2026

CVE-2025-39929

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

CVSS

7.5

High

EPSS

0.3%

p23

KEV

—

Exploit Today

0-100

Published: Oct 4, 2025 · Last modified: Jul 30, 2026 · CWE-401

EPSS · 30d

0.3%EPSS · 30 days0.3%

2026-08-132026-09-09

Technical description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path During tests of another unrelated patch I was able to trigger this error: Objects remaining on __kmem_cache_shutdown()

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-781313.7 LOW

—

———strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.9h CVE-2026-781273.7 LOW

—

———libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.9h CVE-2026-781243.7 LOW

—

———strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.9h CVE-2026-700657.5 HIG

66.3%

——20Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.18h CVE-2026-698097.5 HIG

63.7%

——19Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.3d CVE-2026-697816.5 MED

42.3%

——13Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.17h