Linux Kernel Vulnerability in KSMPD Addressing Session Management Issues

CVE-2025-22040

Summary

A vulnerability in the Linux kernel related to the ksmbd service involves a race condition occurring during session setup and deregistration. In this scenario, a session may be prematurely released from memory before it is adequately referenced in a channel list, leading to potential exploitation. A patch has been implemented to check the reference count of the session prior to its deallocation, thereby addressing the use-after-free condition and enhancing the overall security of the kernel.

References