Critical Use-After-Free Vulnerability in Linux Kernel (CVE-2025-22040)
Summary
CVE-2025-22040: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race condition between session setup and ksmbd_sessions_deregister. Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, including various distributions of Debian. It manages system resources and provides essential services for software applications. The kernel is known for its stability and performance, but like any complex software, it can have vulnerabilities. CVE-2025-22040 is a significant issue that affects multiple Debian versions, highlighting the importance of maintaining up-to-date systems.
Vulnerability Detail
CVE-2025-22040 is a use-after-free vulnerability in the ksmbd component of the Linux kernel. This vulnerability arises from a race condition between session setup and the deregistration of ksmbd sessions. Specifically, the session can be freed before the connection is added to the channel list of the session, potentially leading to undefined behavior, crashes, or exploitation by attackers. The vulnerability affects multiple Debian versions, making it critical for users to address it promptly.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
CVE-2025-22040 is a critical vulnerability in the Linux kernel that requires immediate attention from users of affected Debian versions. Updating to the latest patched version is essential to ensure system security and stability. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2025-22040 is a use-after-free vulnerability in the ksmbd component of the Linux kernel, which can lead to potential exploitation.
This vulnerability can cause crashes or allow attackers to exploit the system, leading to unauthorized access or data corruption.
Debian versions 11, 12, and 13 are affected by this vulnerability.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
While there are no specific workarounds available, it is crucial to prioritize updating your kernel to mitigate the risk associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
