CVE-2025-21955
High
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent connection release during oplock break notification ksmbd_work could be freed when after connection release. Increment r_count of ksmbd_conn to indicate that requests are not finished yet and to not release the connection.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Linux Kernel
PublishedApr 1, 2025
First seenApr 1, 2025
How to fix
Update
- linux linux_kernel6.6.84, 6.12.20, 6.13.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.15 ≤ v < 6.6.84, 6.7 ≤ v < 6.12.20, 6.13 ≤ v < 6.13.8, 6.14 | 6.6.84, 6.12.20, 6.13.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.