PT-2025-14326 · Linux+6 · Linux Kernel+6

Published 2025-02-26 · Updated 2026-05-26 · CVE-2025-21945

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the Linux kernel, specifically in the ksmbd component related to smb2 lock. This occurs when smb lock->zero len has a value, and the ->llist of smb lock is not deleted, resulting in an old flock. This situation can lead to a use-after-free error during error handling routines.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2025-12647

ALT-PU-2025-5786

BDU:2025-04649

CVE-2025-21945

DLA-4193-1

DSA-5900-1

ECHO-142C-88E3-3EC5

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7764-1

USN-7764-2

USN-7765-1

USN-7766-1

USN-7767-1

USN-7767-2

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

USN-7809-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 282

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21945.json · Exploit
• https://ubuntu.com/security/CVE-2025-22009 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22072 · Vendor Advisory
• https://git.kernel.org/stable/c/410ce35a2ed6d0e114132bba29af49b69880c8c7 · Patch
• https://ubuntu.com/security/CVE-2025-22025 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53034 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7802-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22022 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22064 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21945 · Security Note
• https://ubuntu.com/security/CVE-2025-21899 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21902 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22079 · Vendor Advisory