Use-After-Free Vulnerability in Linux Kernel Affecting SMB2 Lock Functionality

CVE-2025-21945

Summary

A use-after-free vulnerability exists within the Linux kernel's SMB2 lock handling that can lead to potential system instability. When the 'zero_len' attribute of an smb_lock structure is set, the associated 'llist' is not properly deleted, leaving a situation where a previously allocated memory block can be referenced after being freed. This issue may arise during error handling routines, allowing for unintended behaviors that could be exploited by malicious actors to execute arbitrary code or crash systems.

References