You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
session leak
About this tag
A session leak occurs when a system fails to properly release resources tied to a network session, such as SMB or CIFS connections, leading to resource exhaustion and degraded performance. On WindowsForum.com, discussions cover session leaks in Windows Vista, Server 2008, Windows 7, and Server 2008 R2, where an SMB/CIFS leak can cause the server to stop responding to client requests. A related thread addresses a Linux kernel fix for CVE-2025-40285, a session refcount leak in the ksmbd SMB server that could accumulate leaked session objects under sustained triggering. These topics highlight the importance of proper session lifecycle management in both Windows and Linux environments to maintain system stability and availability.
A small but important kernel fix landed this week to close CVE‑2025‑40285 — a reference‑counting bug in the Linux kernel’s in‑kernel SMB server that could leak a ksmbd session object when a session reconnects. The patch adds a missing ksmbd_user_session_put in smb2_sess_setup, closing a race /...
Fixes an SMB/CIFS sessions leak in Windows Vista, in Windows Server 2008, in Windows 7 and in Windows Server 2008 R2. When this issue occurs, the SMB/CIFS server does not respond to client requests.
More...