CVE-2025-22040 is a use-after-free vulnerability in the ksmbd component of the Linux kernel related to multichannel SMB connections. A race condition between session setup and session deregistration can cause the session to be freed prematurely before the connection is fully added to the session's channel list. This flaw allows potential unauthorized access or disruption due to improper memory handling.