CVE-2025-21955

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: prevent connection release during oplock break notification

ksmbd_work could be freed when after connection release. Increment r_count of ksmbd_conn to indicate that requests are not finished yet and to not release the connection.

This vulnerability does not impact Red Hat Enterprise Linux as the in-kernel SMB server (ksmbd) is not enabled or compiled in supported kernel packages. Red Hat relies on user-space Samba implementations for SMB networking rather than the in-kernel file server. As a result, the vulnerable subsystem and code paths are absent from supported Red Hat kernels.