Memory Management Vulnerability in Linux Kernel Affecting SMB Protocols

CVE-2025-39932

What is CVE-2025-39932?

A memory management vulnerability has been identified in the Linux kernel impacting SMB protocols. The issue arises during the execution of the smbd_destroy() function, which fails to adequately manage the lifecycle of pending work items related to memory deallocation. Specifically, the post_send_credits_work may still be active when memory is destroyed, potentially leading to access violations or crashes. This flaw highlights the importance of proper synchronization in memory management operations within kernel processes, ensuring that all asynchronous workflows are completed before proceeding with memory deallocation.

References