CVE-2025-21945

Summary

CVE-2025-21945 is a recently identified vulnerability in the Linux kernel. Specifically, it affects the ksmbd component and stems from a use-after-free issue in smb2_lock. When an error occurs and smb_lock->zero_len retains its value, the ->llist of smb_lock fails to be deleted. As a result, the previous flock remains active, leading to a use-after-free situation during error handling routines. This issue could potentially be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition. Users are advised to update their Linux kernel to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.