CVE Database›CVE-2025-22074

CVE-2025-22074

kernel: ksmbd: fix r_count dec/increment mismatch

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 16, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix r_count dec/increment mismatch

r_count is only increased when there is an oplock break wait, so r_count inc/decrement are not paired. This can cause r_count to become negative, which can lead to a problem where the ksmbd thread does not terminate.

Statement

Red Hat Enterprise Linux is not affected by this vulnerability because the flawed ksmbd reference counting code is not present in Red Hat kernels. The issue stems from uncoordinated reference counter handling during SMB oplock breaks in upstream kernels. Because this in-kernel SMB server implementation is not shipped in Red Hat Enterprise Linux, this flaw does not present an operational risk to Red Hat environments.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified