Medium severity5.5NVD Advisory· Published Apr 1, 2025· Updated Jun 17, 2026

CVE-2025-21955

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: prevent connection release during oplock break notification

ksmbd_work could be freed when after connection release. Increment r_count of ksmbd_conn to indicate that requests are not finished yet and to not release the connection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernelllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 5.15
Linux/Ksmbdllm-fuzzy
osv-coords
pkg:linux/kernel
Range: >= 5.15.0, < 6.6.84

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/09aeab68033161cb54f194da93e51a11aee6144bnvdPatch
git.kernel.org/stable/c/3aa660c059240e0c795217182cf7df32909dd917nvdPatch
git.kernel.org/stable/c/a4261bbc33fbf99b99c80aa3a2c5097611802980nvdPatch
git.kernel.org/stable/c/f17d1c63a76b0fe8e9c78023a86507a3a6d62cfanvdPatch

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000