CVE-2025-39929: 
Linux Kernel vulnerability analysis and mitigation

A memory leak vulnerability (CVE-2025-39929) was discovered in the Linux kernel, specifically in the SMB client's smbdirectrecvio functionality during the smbd_negotiate() error path. The vulnerability was disclosed on October 4, 2025, affecting various Linux kernel versions (NVD).

The vulnerability manifests as a memory leak in the SMB client component of the Linux kernel, specifically during error handling in the smbdnegotiate() function. The issue was discovered during testing of an unrelated patch when objects were found remaining on _kmemcacheshutdown() (NVD).

The vulnerability can lead to memory leaks in the Linux kernel, which could potentially result in system resource exhaustion over time. This issue affects multiple Ubuntu releases including 25.04 plucky, 24.04 LTS noble, and 22.04 LTS jammy (Ubuntu).

Several Linux distributions have marked this vulnerability for patching. Ubuntu has identified the vulnerability as having medium priority and is actively working on updates for affected versions. Various kernel versions including linux-hwe-6.8, linux-aws-6.8, and linux-azure-6.8 are being updated to address this issue (Ubuntu).