Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-21955

ksmbd: prevent connection release during oplock break notification

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent connection release during oplock break notification ksmbd_work could be freed when after connection release. Increment r_count of ksmbd_conn to indicate that requests are not finished yet and to not release the connection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 8e6508c7ecb1802909f294827eff38f301d0c937affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 09aeab68033161cb54f194da93e51a11aee6144baffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < a4261bbc33fbf99b99c80aa3a2c5097611802980affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < f17d1c63a76b0fe8e9c78023a86507a3a6d62cfaaffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 3aa660c059240e0c795217182cf7df32909dd917affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.84 to ≤ 6.6.*unaffected
  • 6.12.20 to ≤ 6.12.*unaffected
  • 6.13.8 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References