CVE-2025-21944

ksmbd: fix bug on trap in smb2_lock

MEDIUM

5.5

CVSS Score

Published: April 1, 2025 at 03:41 PM UTC

Updated: June 17, 2026 at 08:44 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix bug on trap in smb2_lock If lock count is greater than 1, flags could be old value. It should be checked with flags of smb_lock, not flags. It will cause bug-on trap from locks_free_lock in error handling routine.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.15 ≤ v < 6.1.1315.15 ≤ v < 6.12.195.15 ≤ v < 6.13.75.15 ≤ v < 6.145.15 ≤ v < 6.6.836.13 ≤ v < 6.13.76.2 ≤ v < 6.6.836.7 ≤ v < 6.12.195.15 6.14 rc1 6.14 rc2 6.14 rc3 6.14 rc4 6.14 rc5626e6641f6b467447c81dd7678a69c66f7746cf

Vendor states this is fixed in 11e0e74e14f1832a95092f2c98ed3b99f57797ee (fixed)

Vendor states this is fixed in 2b70e3ac79eacbdf32571f7af48dd81cdd957ca8 (fixed)

Vendor states this is fixed in 8994f0ce8259f812b4f4a681d8298c6ff682efaa (fixed)

Vendor states this is fixed in dbcd7fdd86f77529210fe8978154a81cd479844c (fixed)

Vendor states this is fixed in e26e2d2e15daf1ab33e0135caf2304a0cfa2744b (fixed)

Vendor states this is fixed in 5.15 (unaffected)

Vendor states this is fixed in 6.1.131 (unaffected)

Vendor states this is fixed in 6.12.19 (unaffected)

Vendor states this is fixed in 6.13.7 (unaffected)

Vendor states this is fixed in 6.14 (unaffected)

Vendor states this is fixed in 6.6.83 (unaffected)