CVE-2025-21955

ksmbd: prevent connection release during oplock break notification

State: Published
Severity: 8.8 High
Published: Apr 1, 2025
Updated: Oct 30, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: prevent connection release during oplock break notification

ksmbd_work could be freed when after connection release. Increment r_count of ksmbd_conn to indicate that requests are not finished yet and to not release the connection.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0626e6641f6b467447c81dd7678a69c66f7746cf to before 8e6508c7ecb1802909f294827eff38f301d0c937Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 09aeab68033161cb54f194da93e51a11aee6144bAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before a4261bbc33fbf99b99c80aa3a2c5097611802980Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before f17d1c63a76b0fe8e9c78023a86507a3a6d62cfaAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 3aa660c059240e0c795217182cf7df32909dd917Affected
LinuxLinux	5.15Affected before 5.15Not affected 6.1.191 through 6.1.Not affected 6.6.84 through 6.6.Not affected 6.12.20 through 6.12.Not affected 6.13.8 through 6.13.Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

0626e6641f6b467447c81dd7678a69c66f7746cf to before 8e6508c7ecb1802909f294827eff38f301d0c937Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 09aeab68033161cb54f194da93e51a11aee6144bAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before a4261bbc33fbf99b99c80aa3a2c5097611802980Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before f17d1c63a76b0fe8e9c78023a86507a3a6d62cfaAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 3aa660c059240e0c795217182cf7df32909dd917Affected

LinuxLinux

5.15Affected
before 5.15Not affected
6.1.191 through 6.1.*Not affected
6.6.84 through 6.6.*Not affected
6.12.20 through 6.12.*Not affected
6.13.8 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.