CVE-2025-22040

ksmbd: fix session use-after-free in multichannel connection

High · published April 16, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
52.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix session use-after-free in multichannel connection

There is a race condition between session setup and

ksmbd_sessions_deregister. The session can be freed before the connection

is added to channel list of session.

This patch check reference count of session before freeing it.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00703 · 52.8th percentile
Published
2025-04-16T14:11Z
EPSS history
Timeline
  • 16 APR 14:11Z
    ksmbd: fix session use-after-free in multichannel connection
    cvelistv5