CVE-2025-22041
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Apr 16, 2025
Updated: Apr 25, 2025
CWE ID 416
Summary
CVE-2025-22041 is a use-after-free vulnerability affecting the Linux kernel's ksmbd component. In multichannel mode, this issue can occur during session deregistration in ksmbd_sessions_deregister(), allowing an attacker to access a freed session through the connection's sessions pointer. This vulnerability could potentially lead to arbitrary code execution or denial-of-service attacks. Linux users are advised to apply the relevant patch as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.