PT-2025-14348 · Linux+5 · Linux Kernel+5

Published 2025-03-10 · Updated 2026-05-26 · CVE-2025-21967

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the ksmbd component of the Linux kernel. Specifically, the interim entry of ksmbd work could be deleted after an oplock is freed. This vulnerability has been resolved by immediately sending the interim request when an oplock break wait is needed, eliminating the need to manage it with a linked list.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2025-12647

ALT-PU-2025-5786

BDU:2026-02230

CVE-2025-21967

ECHO-0312-C7C5-9F8C

MGASA-2025-0142

MGASA-2025-0146

OESA-2025-2268

OESA-2025-2269

OESA-2025-2270

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7764-1

USN-7764-2

USN-7765-1

USN-7766-1

USN-7767-1

USN-7767-2

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

USN-7809-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Ubuntu

References · 323

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21967.json · Exploit
• https://ubuntu.com/security/CVE-2025-22009 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22072 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22025 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53034 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7802-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02230 · Security Note
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22022 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22064 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38119 · Security Note
• https://ubuntu.com/security/CVE-2025-21899 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21902 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22079 · Vendor Advisory