8.8

CVE-2025-22040: debian debian_linux Use After Free

CVSS: 8.8v3.1HighAnalyzed
AliasesUBUNTU-CVE-2025-22040DEBIAN-CVE-2025-22040
Published 16-04-2025Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2025-22040 is a high (CVSS 8.8) Use After Free vulnerability in debian debian_linux. EPSS estimates a 0.70% chance of exploitation in the next 30 days, higher than 52.4% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.70%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 21 · Related 17
DLA-4193-1DSA-5907-1MGASA-2025-0142MGASA-2025-0146USN-7594-1USN-7594-2

Timeline

  1. 16-04-2025
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race condition between session setup and ksmbd_sessions_deregister. The session can be freed before the connection is added to channel list of session. This patch check reference count of session before freeing it.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.70%

Chance of exploitation in the next 30 days

Percentile

52%

Versus all other CVEs

30-day change

+0.01 pp

From 0.69% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.70%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu126 products
  • linuxAll versions (No fix recorded) | < 6.8.0-86.87
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1041.43
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 596407adb9af1ee75fe7c7529607783d31b66e7f | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 3980770cb1470054e6400fd97668665975726737 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 9069939d762138e232a6f79e3e1462682ed6a17d | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 94c281721d4ed2d972232414b91d98a6f5bdb16b | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 7dfbd4c43eed91dd2548a95236908025707a8dfd | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < fa4cdb8cbca7d6cb6aa13e4d8d83d1103f6345db | 5.15
  • linux_kernel≥ 5.15, < 6.1.134 | ≥ 6.2, < 6.6.87 | ≥ 6.7, < 6.12.23 | ≥ 6.13, < 6.13.11 | ≥ 6.14, < 6.14.2

3 vendors · 130 products

References

28 links
Show all 28 references