CVE-2025-22074
kernel: ksmbd: fix r_count dec/increment mismatch
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 16, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix r_count dec/increment mismatch
r_count is only increased when there is an oplock break wait, so r_count inc/decrement are not paired. This can cause r_count to become negative, which can lead to a problem where the ksmbd thread does not terminate.
Statement
Red Hat Enterprise Linux is not affected by this vulnerability because the flawed ksmbd reference counting code is not present in Red Hat kernels. The issue stems from uncoordinated reference counter handling during SMB oplock breaks in upstream kernels. Because this in-kernel SMB server implementation is not shipped in Red Hat Enterprise Linux, this flaw does not present an operational risk to Red Hat environments.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified