Use-after-free Vulnerability in Linux Kernel's ksmbd Component

CVE-2025-21967

Summary

A use-after-free vulnerability exists in the ksmbd component of the Linux kernel, which may be exploited when an interim entry of ksmbd_work is deleted after the associated oplock is freed. This flaw can lead to potential data corruption or system instability if an attacker manages to access the freed memory before it is reallocated. System administrators are advised to apply the latest patches and updates to mitigate the risk associated with this issue.

References