Log in Start free

Vulnerability · Published Apr 1, 2025 · Assigned by Linux

CVE-2025-21947ksmbd: fix type confusion via race condition when using ipc_msg_send_request

High 8.1

In plain English

A high-severity race condition in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.4%top 66.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix type confusion via race condition when using ipc_msg_send_request req->handle is allocated using ksmbd_acquire_id(&ipc_ida), based on ida_alloc. req->handle from ksmbd_ipc_login_request and FSCTL_PIPE_TRANSCEIVE ioctl can be same and it could lead to type confusion between messages, resulting in access to unexpected parts of memory after an incorrect delivery. ksmbd check type of ipc response but missing add continue to check next ipc reponse.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.133-1DEBIAN-CVE-2025-21947
Debian:13linux6.12.19-1DEBIAN-CVE-2025-21947
Debian:14linux6.12.19-1DEBIAN-CVE-2025-21947
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux5.15.0-202.212USN-8961-1
Ubuntu:24.04:LTSlinux6.8.0-84.84UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-aws5.15.0-1119.126USN-8961-1
Ubuntu:22.04:LTSlinux-aws5.15.0-1119.126UBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-aws6.8.0-1039.41UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1039.41~22.04.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-azure5.15.0-1125.134UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-azure5.15.0-1125.134USN-8961-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1038.44UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1018.18~24.04.1USN-7628-1
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1018.18~24.04.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1036.42~22.04.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1124.133USN-8962-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1124.133UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1025.27UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-gcp5.15.0-1120.130UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-gcp5.15.0-1120.130USN-8961-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1040.42UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1016.16~24.04.1USN-7605-1
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1016.16~24.04.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1040.42~22.04.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-gke5.15.0-1115.121UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-gke5.15.0-1115.121USN-8961-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1036.40UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1102.110UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1102.110USN-8961-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1023.25UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-28.28~24.04.1USN-7605-1
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-28.28~24.04.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-85.85~22.04.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-ibm5.15.0-1113.117UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-ibm5.15.0-1113.117USN-8961-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1037.37UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1037.37~22.04.1UBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1114.120UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1114.120USN-8961-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1111.116USN-8961-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1111.116UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-197.207USN-8961-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-197.207UBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-84.84.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1015.16~24.04.2USN-7605-2
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1015.16~24.04.2UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-84.84.1~22.04.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1114.115USN-8961-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1114.115UBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1039.42UBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1012.12UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1039.42~22.04.1UBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1039.42.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1070.72USN-8963-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1070.72UBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1010.10UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1059.59UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1059.59USN-8963-1
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1024.24USN-7606-1
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1024.24UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-oracle5.15.0-1116.122USN-8961-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1116.122UBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-oracle6.8.0-1037.38UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1037.38~22.04.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-raspi6.8.0-1039.43UBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-84.84~22.04.1UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21947
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1018.19UBUNTU-CVE-2025-21947
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2025-21947

Affected products (as reported)

VendorProductVersions
Linux Linux 0626e6641f6b467447c81dd7678a69c66f7746cf – before 6321bbda4244b93802d61cfe0887883aae322f4b0626e6641f6b467447c81dd7678a69c66f7746cf – before 76861630b29e51373e73e7b00ad0d467b69411620626e6641f6b467447c81dd7678a69c66f7746cf – before 3cb2b2e41541fe6f9cc55ca22d4c0bd260498aea0626e6641f6b467447c81dd7678a69c66f7746cf – before 1e8833c03a38e1d5d5df6484e3f670a2fd38fb760626e6641f6b467447c81dd7678a69c66f7746cf – before e2ff19f0b7a30e03516e6eb73b948e27a55bc9d2
Linux Linux 5.15

Weakness: CWE-362 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References