Remote Denial of Service Vulnerability in Linux Kernel ksmbd Module

CVE-2025-68246

What is CVE-2025-68246?

A vulnerability in the Linux kernel's ksmbd module allows for a remote denial of service when the per-IP connection limit is exceeded. Specifically, the error handling logic fails to close accepted sockets on connection rejection, leading to a situation where a single IP can leak multiple sockets for each rejected connection attempt. This bug, identified by ZeroPath, poses a risk of service interruption and requires attention to properly manage socket connections in the affected versions.

References