Use-After-Free Vulnerability in Linux Kernel's ksmbd Package
Summary
CVE-2025-21967: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_free_work_struct ->interim_entry of ksmbd_work could be deleted after oplock is freed. Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core of many operating systems, providing essential services for hardware and software interaction. The ksmbd module allows for SMB (Server Message Block) protocol support, enabling file sharing and printing services over a network. This vulnerability affects the ksmbd implementation, which is crucial for network file sharing in various Linux distributions.
Vulnerability Detail
In the Linux kernel, a use-after-free vulnerability has been identified in the ksmbd module. This occurs when the interim_entry of ksmbd_work is deleted after the oplock is freed, leading to potential memory corruption. Attackers could exploit this flaw to execute arbitrary code or crash the system, posing significant security risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. It is recommended to apply the patch as soon as it becomes available.
Conclusion
The use-after-free vulnerability in the ksmbd module of the Linux kernel poses significant risks to system security. Users are strongly advised to update their systems to the latest patched version to mitigate these risks and ensure the integrity of their network file sharing services.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory location after it has been freed, potentially leading to memory corruption and exploitation.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Exploitation of this vulnerability could allow attackers to execute arbitrary code, leading to system crashes or unauthorized access to sensitive information.
Yes, a patch is available for Debian 13 in version 6.12.20-1. Users should update their kernel to this version to mitigate the risk.
While no specific workarounds are available, it is crucial to prioritize updating your kernel to the patched version as soon as possible to protect against potential exploits.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
