CVE-2025-22041: ksmbd: fix use-after-free in ksmbd_sessions_deregister()
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in ksmbdsessionsderegister()
In multichannel mode, UAF issue can occur in sessionderegister when the second channel sets up a session through the connection of the first channel. session that is freed through the global session table can be accessed again through ->sessions of connection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22041?
CVE-2025-22041 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-22041?
To fix CVE-2025-22041, update the Linux kernel to the patched version provided by your distribution.
What systems are affected by CVE-2025-22041?
CVE-2025-22041 affects the Linux kernel, specifically systems using the ksmbd functionality.
What does CVE-2025-22041 exploit?
CVE-2025-22041 exploits a use-after-free vulnerability during session deregistration in multichannel mode.
Is there a workaround for CVE-2025-22041?
Currently, no specific workaround exists for CVE-2025-22041 apart from applying the necessary updates.