CVE-2025-21945

ksmbd: fix use-after-free in smb2_lock

State: Published
Severity: 8.8 High
Published: Apr 1, 2025
Updated: Aug 5, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in smb2_lock

If smb_lock->zero_len has value, ->llist of smb_lock is not delete and flock is old one. It will cause use-after-free on error handling routine.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	0626e6641f6b467447c81dd7678a69c66f7746cf to before 410ce35a2ed6d0e114132bba29af49b69880c8c7Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 8573571060ca466cbef2c6f03306b2cc7b883506Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before a0609097fd10d618aed4864038393dd75131289eAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 636e021646cf9b52ddfea7c809b018e91f2188cbAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 84d2d1641b71dec326e8736a749b7ee76a9599fcAffected
LinuxLinux	5.15Affected before 5.15Not affected 6.1.131 through 6.1.Not affected 6.6.83 through 6.6.Not affected 6.12.19 through 6.12.Not affected 6.13.7 through 6.13.Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

0626e6641f6b467447c81dd7678a69c66f7746cf to before 410ce35a2ed6d0e114132bba29af49b69880c8c7Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 8573571060ca466cbef2c6f03306b2cc7b883506Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before a0609097fd10d618aed4864038393dd75131289eAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 636e021646cf9b52ddfea7c809b018e91f2188cbAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 84d2d1641b71dec326e8736a749b7ee76a9599fcAffected

LinuxLinux

5.15Affected
before 5.15Not affected
6.1.131 through 6.1.*Not affected
6.6.83 through 6.6.*Not affected
6.12.19 through 6.12.*Not affected
6.13.7 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.