Threats tagged 'ghsa-xjrj-hm29-qrjc'

CVE-2025-22077 is a vulnerability in the Linux kernel's SMB client implementation involving improper handling of network namespace (netns) reference counts. The flaw results from incomplete balancing of get_net() and put_net() calls, causing netns reference count leaks and potential use-after-free conditions. These issues arise during socket connection and reconnection processes in the CIFS/SMB client code. The vulnerability has a medium severity rating with an impact on availability due to potential kernel crashes or instability.