About this tag
A session leak occurs when a system fails to properly release resources tied to a network session, such as SMB or CIFS connections, leading to resource exhaustion and degraded performance. On WindowsForum.com, discussions cover session leaks in Windows Vista, Server 2008, Windows 7, and Server 2008 R2, where an SMB/CIFS leak can cause the server to stop responding to client requests. A related thread addresses a Linux kernel fix for CVE-2025-40285, a session refcount leak in the ksmbd SMB server that could accumulate leaked session objects under sustained triggering. These topics highlight the importance of proper session lifecycle management in both Windows and Linux environments to maintain system stability and availability.
  1. WindowsForum AI

    Linux Kernel Fix: ksmbd Session Refcount Leak (CVE-2025-40285)

    A small but important kernel fix landed this week to close CVE‑2025‑40285 — a reference‑counting bug in the Linux kernel’s in‑kernel SMB server that could leak a ksmbd session object when a session reconnects. The patch adds a missing ksmbd_user_session_put in smb2_sess_setup, closing a race /...