---
id: CVE-2025-71220
title: 'smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()

  When ksmbd_iov_pin_rsp() fails, we should call ksmbd_session_rpc_close().
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f2283680a80571ca82d710bc6ecd8f8beac67d63 <
    a2c68e256fb7a4ac34154c6e865a1389acca839f
  - >-
    Linux >= 9f297df20d93411c0b4ddad7f88ba04a7cd36e77 <
    2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29
  - >-
    Linux >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d <
    04dd114b682a4ccaeba2c2bad049c8b50ce740d8
  - >-
    Linux >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d <
    ac18761b530b5dd40f59af8a25902282e5512854
  - >-
    Linux >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d <
    fdda836fcee6fdbcccc24e3679097efb583f581f
  - >-
    Linux >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d <
    7c28f8eef5ac5312794d8a52918076dcd787e53b
  - Linux >= 5.15.145 < 5.15.200
  - Linux >= 6.1.71 < 6.1.163
  - Linux 6.6
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:15:11.858502Z'
published: '2026-02-14'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:23:10.326Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-71220'
references:
  - url: 'https://git.kernel.org/stable/c/a2c68e256fb7a4ac34154c6e865a1389acca839f'
  - url: 'https://git.kernel.org/stable/c/2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29'
  - url: 'https://git.kernel.org/stable/c/04dd114b682a4ccaeba2c2bad049c8b50ce740d8'
  - url: 'https://git.kernel.org/stable/c/ac18761b530b5dd40f59af8a25902282e5512854'
  - url: 'https://git.kernel.org/stable/c/fdda836fcee6fdbcccc24e3679097efb583f581f'
  - url: 'https://git.kernel.org/stable/c/7c28f8eef5ac5312794d8a52918076dcd787e53b'
tags:
  - cve.org
epss: 0.00152
epssPercentile: 0.04346
ingestedAt: '2026-11-05T22:38:32.055Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()

When ksmbd_iov_pin_rsp() fails, we should call ksmbd_session_rpc_close().

## Affected

- `Linux >= f2283680a80571ca82d710bc6ecd8f8beac67d63 < a2c68e256fb7a4ac34154c6e865a1389acca839f`
- `Linux >= 9f297df20d93411c0b4ddad7f88ba04a7cd36e77 < 2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29`
- `Linux >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d < 04dd114b682a4ccaeba2c2bad049c8b50ce740d8`
- `Linux >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d < ac18761b530b5dd40f59af8a25902282e5512854`
- `Linux >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d < fdda836fcee6fdbcccc24e3679097efb583f581f`
- `Linux >= e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d < 7c28f8eef5ac5312794d8a52918076dcd787e53b`
- `Linux >= 5.15.145 < 5.15.200`
- `Linux >= 6.1.71 < 6.1.163`
- `Linux 6.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.