CVE-2025-22074

ksmbd: fix r_count dec/increment mismatch

MEDIUM

5.5

CVSS Score

Published: April 16, 2025 at 02:12 PM UTC

Updated: August 5, 2026 at 12:44 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.5%

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix r_count dec/increment mismatch r_count is only increased when there is an oplock break wait, so r_count inc/decrement are not paired. This can cause r_count to become negative, which can lead to a problem where the ksmbd thread does not terminate.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

6.12.20 ≤ v < 6.12.236.13.8 ≤ v < 6.13.116.14 ≤ v < 6.14.26.14 ≤ v < 6.156.6.84 ≤ v < 6.6.873aa660c059240e0c795217182cf7df32909dd9176.12.20 6.13.8 6.14 6.14 rc7 6.14.1 6.6.849aeab68033161cb54f194da93e51a11aee6144ba4261bbc33fbf99b99c80aa3a2c5097611802980f17d1c63a76b0fe8e9c78023a86507a3a6d62cfa

Vendor states this is fixed in 20378cf48359f39dee0ef9b61470ebe77bd49c0d (fixed)

Vendor states this is fixed in 457db486203c90e10c3efc87fd45cc7000b1cd36 (fixed)

Vendor states this is fixed in 4790bcb269e5d6d88200a67c54ae6d627332a3be (fixed)

Vendor states this is fixed in c2ec33d46b4d1c8085dab5d02e00b21f4f0fb8a9 (fixed)

Vendor states this is fixed in ddb7ea36ba7129c2ed107e2186591128618864e1 (fixed)

Vendor states this is fixed in 6.12.23 (unaffected)

Vendor states this is fixed in 6.13.11 (unaffected)

Vendor states this is fixed in 6.14 (unaffected)

Vendor states this is fixed in 6.14.2 (unaffected)

Vendor states this is fixed in 6.15 (unaffected)

Vendor states this is fixed in 6.6.87 (unaffected)