Bounds Check Vulnerability in Linux Kernel - CVE-2025-22042
Summary
CVE-2025-22042: In the Linux kernel, the following vulnerability has been resolved: ksmbd: add bounds check for create lease context Add missing bounds check for create lease context. Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and flexibility, making it a popular choice for servers, desktops, and embedded systems. However, like any software, it is susceptible to vulnerabilities that can compromise system security. CVE-2025-22042 specifically addresses a missing bounds check in the ksmbd module, which could lead to potential exploitation.
Vulnerability Detail
CVE-2025-22042 is a vulnerability in the Linux kernel's ksmbd module, which is responsible for handling SMB (Server Message Block) protocol requests. The vulnerability arises from a lack of proper bounds checking when creating lease contexts, which could allow an attacker to exploit this oversight. The ramifications of this vulnerability could include unauthorized access to system resources or data corruption, potentially leading to a denial of service or data leakage.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As of now, no specific workarounds have been provided for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate risks.
Conclusion
CVE-2025-22042 represents a significant vulnerability in the Linux kernel's ksmbd module due to a missing bounds check. Users are strongly encouraged to update their systems to the latest patched version to protect against potential exploitation. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2025-22042 is a vulnerability in the Linux kernel related to the ksmbd module, specifically due to a missing bounds check for creating lease contexts.
If exploited, this vulnerability could allow unauthorized access to system resources or lead to data corruption, potentially resulting in a denial of service.
Yes, users are advised to update their Linux kernel to the latest version that includes a fix for CVE-2025-22042.
While no specific workarounds are available, it is crucial to monitor for updates and apply them as soon as possible to mitigate risks.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
