CIFS Module Null Pointer Dereference Vulnerability in Linux Kernel
Summary
CVE-2025-23143: In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It supports various file systems, including CIFS (Common Internet File System), which allows file sharing over a network. The kernel's stability and security are paramount, as vulnerabilities can lead to system crashes or unauthorized access.
Vulnerability Detail
The vulnerability, identified as CVE-2025-23143, arises from a null pointer dereference issue in the CIFS module of the Linux kernel. This occurs when the CIFS module is unloaded while a TCP socket remains active, leading to a discrepancy in the lifecycle management of the module and the socket. When the socket is still alive but the module is unloaded, it triggers a warning and a null pointer dereference, potentially causing system instability or crashes.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid unloading the CIFS module while any associated TCP sockets are still active. This can be done by ensuring that all CIFS connections are properly closed before attempting to unload the module.
Conclusion
CVE-2025-23143 is a critical vulnerability in the Linux kernel's CIFS module that can lead to system instability due to a null pointer dereference. Users are advised to update their kernel to the latest version to mitigate this issue and ensure system security.
See every vulnerability recorded for linux →
FAQ
CVE-2025-23143 is a vulnerability in the Linux kernel's CIFS module that can lead to a null pointer dereference, causing system instability.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The vulnerability can lead to system crashes or instability when the CIFS module is unloaded while sockets are still active.
Yes, a patch is available in the updated versions of the Linux kernel. Users should update their kernel to the latest version to mitigate this issue.
If immediate updates are not possible, ensure that the CIFS module is not unloaded while any TCP sockets are still active as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
