CVE-2025-21967

Summary

CVE-2025-21967 is a recently identified vulnerability in the Linux kernel that affects the ksmbd component. This issue involves a use-after-free condition in the function ksmbd_free_work_struct. Specifically, the interim_entry of ksmbd_work could be deleted after an oplock is freed, leading to unintended behavior. This vulnerability can result in memory corruption or denial of service if exploited, but it is important to note that a linked list management issue is not the root cause, as the interim request can be immediately sent when an oplock break wait is required.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.