Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-68817

ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Under high concurrency, A tree-connection object (tcon) is freed on a disconnect path while another path still holds a reference and later executes *_put()/write on it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dd45db4d9bbc8f122a9b4db5ce94ae29fcf03d3c to < 446beed646b2e426dd53d27358365f8678e1dd01affected
  • 7b58ee8d0b91359554cf219cd4f33872ea2afd66 to < d092de8a26c952379ded8e6b0bda31d89befac1aaffected
  • 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e to < d64977495e44855f2b28d8ce56107c963a7a50e4affected
  • 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e to < 21a3d01fc6db5129f81edb0ab7cb94fd758bcbeaaffected
  • 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e to < 063cbbc6f595ea36ad146e1b7d2af820894beb21affected
  • 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e to < b39a1833cc4a2755b02603eec3a71a85e9dff926affected
  • 5.15.145 to < 5.15.199affected
  • 6.1.71 to < 6.1.160affected

Linux Linux

Default version status: affected

  • 6.6affected
  • 0 to < 6.6unaffected
  • 5.15.199 to ≤ 5.15.*unaffected
  • 6.1.160 to ≤ 6.1.*unaffected
  • 6.6.120 to ≤ 6.6.*unaffected
  • 6.12.64 to ≤ 6.12.*unaffected
  • 6.18.3 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References