In the Linux kernel, the following vulnerability has been resolved:
ksmbd: call rcu_barrier() in ksmbd_server_exit()
racy issue is triggered the bug by racing between closing a connection and rmmod. In ksmbd, rcu_barrier() is not called at module unload time, so nothing prevents ksmbd from getting unloaded while it still has RCU callbacks pending. It leads to trigger unintended execution of kernel code locally and use to defeat protections such as Kernel Lockdown
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 18, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-nvidia-tegra-igxUpgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-ibmUpgrade linux-kvmUpgrade linux-lowlatencyUpgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-riscv-5.15Upgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-awsUpgrade linux-bluefieldUpgrade linux-nvidia-tegra-5.15Upgrade linux-azure-fdeUpgrade linux-raspiUpgrade linux-gkeUpgrade linux-ibm-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegraUpgrade linux-intel-iot-realtimeUpgrade linuxUpgrade linux-aws-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-azure-fde-5.15Upgrade linux-realtimeUpgrade linux-xilinx-zynqmpUpgrade linux-azure | Aug 19, 2025 | Aug 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub