CVE-2025-22041

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in ksmbd_sessions_deregister()

In multichannel mode, UAF issue can occur in session_deregister when the second channel sets up a session through the connection of the first channel. session that is freed through the global session table can be accessed again through ->sessions of connection.

This vulnerability is rated as Important because authenticated network clients could exploit a kernel use-after-free condition to corrupt system memory or cause a denial of service. However, Red Hat Enterprise Linux is not affected by this flaw because the in-kernel SMB server module (ksmbd) is not compiled or shipped in supported enterprise kernels. Red Hat distributions instead provide the user-space Samba implementation for SMB file sharing, leaving standard installations unexposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.