Race Condition Vulnerability in Linux Kernel's Samba Implementation

CVE-2025-40090

What is CVE-2025-40090?

A vulnerability exists in the Linux kernel's Samba implementation, specifically in the ksmbd component, where recursive locking issues in RPC handle list access can lead to hung connections. When a client opens a named pipe using the 'rpcclient' tool, the system may experience a deadlock. The root cause is due to improper management of locks, where the existing lock makes recursive calls problematic, effectively freezing the connection. It's essential for administrators to ensure they are using patched versions of the kernel to mitigate this risk.

References