CVE-2025-21947
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Apr 1, 2025
Updated: Apr 10, 2025
CWE ID 362
Summary
CVE-2025-21947 is a vulnerability affecting the Linux kernel that has been addressed. It involved a race condition in the ksmbd component, where the same handle was used for both req->handle from ksmbd_ipc_login_request and FSCTL_PIPE_TRANSCEIVE ioctl. This type confusion issue led to unexpected memory access after an incorrect message delivery, potentially allowing an attacker to access unintended parts of memory. The vulnerability was due to a missing check in ksmbd to ensure the correct type of the next ipc response.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.