In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in ksmbd_sessions_deregister()
In multichannel mode, UAF issue can occur in session_deregister
when the second channel sets up a session through the connection of
the first channel. session that is freed through the global session
table can be accessed again through ->sessions of connection.
CVSS
No CVSS.
References
Configurations
Configuration 1 (hide)
|
History
25 Apr 2025, 18:42
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux linux Kernel
Linux |
|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| References | () https://git.kernel.org/stable/c/a8a8ae303a8395cbac270b5b404d85df6ec788f8 - Patch | |
| References | () https://git.kernel.org/stable/c/8ed0e9d2f410f63525afb8351181eea36c80bcf1 - Patch | |
| References | () https://git.kernel.org/stable/c/15a9605f8d69dc85005b1a00c31a050b8625e1aa - Patch | |
| References | () https://git.kernel.org/stable/c/33cc29e221df7a3085ae413e8c26c4e81a151153 - Patch | |
| References | () https://git.kernel.org/stable/c/ca042cc0e4f9e0d2c8f86dd67e4b22f30a516a9b - Patch | |
| References | () https://git.kernel.org/stable/c/f0eb3f575138b816da74697bd506682574742fcd - Patch |
16 Apr 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-16 15:15
Updated : 2025-04-25 18:42
NVD link : CVE-2025-22041
Mitre link : CVE-2025-22041
JSON object : View
Products Affected
linux
- linux_kernel
CWE
No CWE.