CVE-2025-21955

MediumCVSS 5.5/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: prevent connection release during oplock break notification

ksmbd_work could be freed when after connection release. Increment r_count of ksmbd_conn to indicate that requests are not finished yet and to not release the connection.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 8e6508c7ecb1802909f294827eff38f301d0c937; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 09aeab68033161cb54f194da93e51a11aee6144b; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < a4261bbc33fbf99b99c80aa3a2c5097611802980; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < f17d1c63a76b0fe8e9c78023a86507a3a6d62cfa; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 3aa660c059240e0c795217182cf7df32909dd917
LinuxLinux5.15

References

Timeline

Published
Apr 1, 2025
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-219565.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign normalized_pix_clk when color depth = 14 [WHY CVE-2025-219575.5In the Linux kernel, the following vulnerability has been resolved: scsi: qla1280: Fix kernel oops when debug level > 2 A null dereferenceCVE-2025-219584.7In the Linux kernel, the following vulnerability has been resolved: Revert "openvswitch: switch to per-action label counting in conntrack" CVE-2025-219595.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in CVE-2025-21966.1A vulnerability was found in MRCMS 3.1.2. It has been declared as problematic. Affected by this vulnerability is the function upload of the CVE-2025-219605.5In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() The bnxt_rx_CVE-2025-219615.5In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix truesize for mb-xdp-pass case When mb-xdp is set and reCVE-2025-219625.5In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option UsCVE-2025-219635.5In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option UserCVE-2025-219645.5In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option UserCVE-2025-219655.5In the Linux kernel, the following vulnerability has been resolved: sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() If a BPF scheCVE-2025-219667.8In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
CVE-2025-21955: Medium severity, CVSS 5.5 | Vulnix