CVE-2025-22074 ksmbd: fix r_count dec/increment mismatch
A mismatch in reference counting within the ksmbd kernel module can cause threads to hang, leading to a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-22074?
CVE-2025-22074 is a high-severity denial of service vulnerability in Linux kernel, published on 16 Apr 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix r_count dec/increment mismatch
r_count is only increased when there is an oplock break wait, so r_count inc/decrement are not paired. This can cause r_count to become negative, which can lead to a problem where the ksmbd thread does not terminate.
Which versions are affected by CVE-2025-22074?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-22074?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-22074 being exploited?
There is no known exploitation of CVE-2025-22074 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-22074, DEBIAN-CVE-2025-22074, GHSA-p54p-8qp2-pc9m, UBUNTU-CVE-2025-22074.