CVE-2025-22041 is a use-after-free vulnerability in the Linux kernel's ksmbd component affecting session deregistration in multichannel mode. The flaw occurs when a session freed from the global session table is accessed again via the connection's session list, potentially leading to high impact on confidentiality, integrity, and availability.