Search: CVE-2025-40039

A race condition vulnerability in the Linux kernel's ksmbd subsystem was fixed. The issue involved improper locking of the 'sess->rpc_handle_list' XArray, which manages RPC handles within a ksmbd session. Incorrect use of read locks instead of write locks during modification operations and lack of locking during lookups could lead to data corruption or use-after-free conditions. The fix ensures proper exclusive write locks during modifications and read locks during lookups to prevent concurrent access issues.