cve/2025/CVE-2025-22040.md
2025-09-29 21:09:30 +02:00

1005 B

CVE-2025-22040

Description

In the Linux kernel, the following vulnerability has been resolved:ksmbd: fix session use-after-free in multichannel connectionThere is a race condition between session setup andksmbd_sessions_deregister. The session can be freed before the connectionis added to channel list of session.This patch check reference count of session before freeing it.

POC

Reference

No PoCs from references.

Github