What’s Vulnerable › Vulnerabilities

CVE-2025-22041: ksmbd: fix use-after-free in ksmbd_sessions_deregister()

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-16 · updated 2026-06-17
• Weakness: CWE-416

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue can occur in session_deregister when the second channel sets up a session through the connection of the first channel. session that is freed through the global session table can be accessed again through ->sessions of connection.

Affected products

• Linux kernel: before 6.1.134; from 6.2 before 6.6.87; from 6.7 before 6.12.13; from 6.13 before 6.13.11; from 6.14 before 6.14.2 — fixed in 6.1.134, 6.12.13, 6.13.11, 6.14.2, 6.6.87

How to fix

Upgrade to a fixed version: Linux kernel 6.1.134, 6.12.13, 6.13.11, 6.14.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/15a9605f8d69dc85005b1a00c31a050b8625e1aa
• https://git.kernel.org/stable/c/33cc29e221df7a3085ae413e8c26c4e81a151153
• https://git.kernel.org/stable/c/8ed0e9d2f410f63525afb8351181eea36c80bcf1
• https://git.kernel.org/stable/c/a8a8ae303a8395cbac270b5b404d85df6ec788f8
• https://git.kernel.org/stable/c/ca042cc0e4f9e0d2c8f86dd67e4b22f30a516a9b
• https://git.kernel.org/stable/c/f0eb3f575138b816da74697bd506682574742fcd
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Get alerted when CVE-2025-22041 or the next vulnerability affects your stack