CVE-2025-22041

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-22041
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue can occur in session_deregister when the second channel sets up a session through the connection of the first channel. session that is freed through the global session table can be accessed again through ->sessions of connection.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/15a9605f8d69dc85005b1a00c31a050b8625e1aa Patch
https://git.kernel.org/stable/c/33cc29e221df7a3085ae413e8c26c4e81a151153 Patch
https://git.kernel.org/stable/c/8ed0e9d2f410f63525afb8351181eea36c80bcf1 Patch
https://git.kernel.org/stable/c/a8a8ae303a8395cbac270b5b404d85df6ec788f8 Patch
https://git.kernel.org/stable/c/ca042cc0e4f9e0d2c8f86dd67e4b22f30a516a9b Patch
https://git.kernel.org/stable/c/f0eb3f575138b816da74697bd506682574742fcd Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

25 Apr 2025, 18:42

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/15a9605f8d69dc85005b1a00c31a050b8625e1aa - () https://git.kernel.org/stable/c/15a9605f8d69dc85005b1a00c31a050b8625e1aa - Patch
References () https://git.kernel.org/stable/c/33cc29e221df7a3085ae413e8c26c4e81a151153 - () https://git.kernel.org/stable/c/33cc29e221df7a3085ae413e8c26c4e81a151153 - Patch
References () https://git.kernel.org/stable/c/8ed0e9d2f410f63525afb8351181eea36c80bcf1 - () https://git.kernel.org/stable/c/8ed0e9d2f410f63525afb8351181eea36c80bcf1 - Patch
References () https://git.kernel.org/stable/c/a8a8ae303a8395cbac270b5b404d85df6ec788f8 - () https://git.kernel.org/stable/c/a8a8ae303a8395cbac270b5b404d85df6ec788f8 - Patch
References () https://git.kernel.org/stable/c/ca042cc0e4f9e0d2c8f86dd67e4b22f30a516a9b - () https://git.kernel.org/stable/c/ca042cc0e4f9e0d2c8f86dd67e4b22f30a516a9b - Patch
References () https://git.kernel.org/stable/c/f0eb3f575138b816da74697bd506682574742fcd - () https://git.kernel.org/stable/c/f0eb3f575138b816da74697bd506682574742fcd - Patch

21 Apr 2025, 15:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: corrección de use-after-free en ksmbd_sessions_deregister() En el modo multicanal, el problema de UAF puede ocurrir en session_deregister cuando el segundo canal configura una sesión a través de la conexión del primer canal. A la sesión que se libera a través de la tabla de sesiones global se puede acceder nuevamente a través de ->sessions de la conexión.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-416

16 Apr 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-16 15:15

Updated : 2025-04-25 18:42

NVD link : CVE-2025-22041

Mitre link : CVE-2025-22041

CVE.ORG link : CVE-2025-22041

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free