CVE-2025-22074: ksmbd: fix r_count dec/increment mismatch

Published Apr 16, 2025
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix rcount dec/increment mismatch

rcount is only increased when there is an oplock break wait, so rcount inc/decrement are not paired. This can cause rcount to become negative, which can lead to a problem where the ksmbd thread does not terminate.

Affected Software

7 affected components
Linux Linux kernel
Linux Linux kernel>=6.6.84<6.6.87
Linux Linux kernel>=6.12.20<6.12.23
Linux Linux kernel>=6.13.8<6.13.11
Linux Linux kernel=6.14
Linux Linux kernel=6.14-rc7
Linux Linux kernel=6.14.1

Event History

Apr 16, 2025
CVE Published
via MITRE·02:12 PM
Data Sourced
via MITRE·02:12 PM
DescriptionSeverity
Data Sourced
via NVD·03:16 PM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2025-22074?

CVE-2025-22074 has been classified as a moderate severity vulnerability in the Linux kernel.

2

What causes CVE-2025-22074?

CVE-2025-22074 is caused by a r_count increment and decrement mismatch during oplock break waits in the ksmbd module.

3

How do I fix CVE-2025-22074?

To fix CVE-2025-22074, update to the latest version of the Linux kernel where this vulnerability has been patched.

4

Which versions of the Linux kernel are affected by CVE-2025-22074?

CVE-2025-22074 affects certain versions of the Linux kernel that utilize the ksmbd module.

5

Is CVE-2025-22074 exploitable remotely?

Yes, CVE-2025-22074 may be exploited remotely under certain conditions related to shared SMB file access.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203