CVE-2025-40285 | Linux Kernel up to 6.1.158/6.6.116/6.12.58/6.17.8 smb2_sess_setup reference count (EUVD-2025-201570 / Nessus ID 277634)
A vulnerability described as critical has been identified in Linux Kernel up to 6.1.158/6.6.116/6.12.58/6.17.8. This impacts the function smb2_sess_setup. Such manipulation leads to improper update of reference count.
This vulnerability is referenced as CVE-2025-40285. The attack needs to be initiated within the local network. No exploit is available.
Upgrading the affected component is recommended.