CVE-2025-21944

ksmbd: fix bug on trap in smb2_lock

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix bug on trap in smb2_lock If lock count is greater than 1, flags could be old value. It should be checked with flags of smb_lock, not flags. It will cause bug-on trap from locks_free_lock in error handling routine.

N/A

CVSS

Severity:

EPSS 0.04%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/11e0e74e14f1832a95092f2c98ed3b99f57797ee
https://git.kernel.org/stable/c/8994f0ce8259f812b4f4a681d8298c6ff682efaa
https://git.kernel.org/stable/c/dbcd7fdd86f77529210fe8978154a81cd479844c
https://git.kernel.org/stable/c/2b70e3ac79eacbdf32571f7af48dd81cdd957ca8
https://git.kernel.org/stable/c/e26e2d2e15daf1ab33e0135caf2304a0cfa2744b

Frequently Asked Questions

What is the severity of CVE-2025-21944?: CVE-2025-21944 has not yet been assigned a CVSS score.
How to fix CVE-2025-21944?: To fix CVE-2025-21944, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2025-21944 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2025-21944 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-21944?: CVE-2025-21944 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.