8.8

CVE-2025-22041: linux Use After Free

CVSS: 8.8v3.1HighModified
AliasesUBUNTU-CVE-2025-22041DEBIAN-CVE-2025-22041
Published 16-04-2025Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2025-22041 is a high (CVSS 8.8) Use After Free vulnerability in linux. EPSS estimates a 0.69% chance of exploitation in the next 30 days, higher than 52.1% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.69%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 22 · Related 17
DLA-4193-1DSA-5907-1LSN-0122-1MGASA-2025-0142MGASA-2025-0146USN-7594-1

Timeline

  1. 16-04-2025
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue can occur in session_deregister when the second channel sets up a session through the connection of the first channel. session that is freed through the global session table can be accessed again through ->sessions of connection.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.69%

Chance of exploitation in the next 30 days

Percentile

52%

Versus all other CVEs

30-day change

+0.01 pp

From 0.68% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.69%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu126 products
  • linuxAll versions (No fix recorded) | < 6.8.0-86.87
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1041.43
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < f0eb3f575138b816da74697bd506682574742fcd | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < a8a8ae303a8395cbac270b5b404d85df6ec788f8 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < ca042cc0e4f9e0d2c8f86dd67e4b22f30a516a9b | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 8ed0e9d2f410f63525afb8351181eea36c80bcf1 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 33cc29e221df7a3085ae413e8c26c4e81a151153 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 15a9605f8d69dc85005b1a00c31a050b8625e1aa | 5.15
  • linux_kernel< 6.1.134 | ≥ 6.2, < 6.6.87 | ≥ 6.7, < 6.12.13 | ≥ 6.13, < 6.13.11 | ≥ 6.14, < 6.14.2
Debian1 product
  • linux< 6.1.135-1 | < 6.12.25-1

3 vendors · 129 products

References

28 links
Show all 28 references