Kernel Vulnerability in Linux Package: TCP Timers Deadlock and Use-After-Free Issues
Summary
DEBIAN-CVE-2025-22077: In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts commit e9f2517a3e18a54a3943c098d2226b245d488801. Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It is responsible for handling system calls, managing memory, and facilitating communication between software and hardware. This vulnerability affects the Linux kernel's handling of TCP connections, particularly in the context of CIFS (Common Internet File System) connections, leading to potential resource leaks and system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the handling of TCP timers after module unloading. The issue arises from a reverted commit intended to fix a null pointer dereference in LOCKDEP, which did not resolve the underlying problem. Instead, it reintroduced a use-after-free condition by reviving the kernel TCP socket without proper management of its state. This can lead to leaked sockets and potential denial of service if a FIN packet is lost during a connection's termination process.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned to mitigate this vulnerability. It is strongly recommended to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux kernel poses significant risks related to TCP connection management, particularly for CIFS. Users are advised to update their systems promptly to the patched version to ensure stability and security. Regular monitoring using tools like Vulert can help in identifying and managing such vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a deadlock in TCP timers and a use-after-free condition in the Linux kernel, specifically affecting CIFS connections.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
If exploited, this vulnerability could lead to resource leaks, system instability, and denial of service due to leaked TCP sockets.
Yes, a patch is available in version 6.12.25-1 of the Linux package. Users should update to this version or later.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to mitigate the risks associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
