CVE-2025-40090 ksmbd: fix recursive locking in RPC handle list access

🗓️ 30 Oct 2025 09:47:58Reported by GoogleType

osv🔗 osv.dev👁 2 Views

CVE-2025-40090 ksmbd fixes recursive locking in RPC handle list access to prevent deadlocks opening pipes.

Reporter	Title	Published	Views	Family All 61
ATTACKERKB	CVE-2025-40090	30 Oct 202509:47	–	attackerkb
AstraLinux	Astra Linux - уязвимость в linux-5.10	3 May 202623:59	–	astralinux
CNNVD	Linux kernel 安全漏洞	30 Oct 202500:00	–	cnnvd
CVE	CVE-2025-40090	30 Oct 202509:47	–	cve
Cvelist	CVE-2025-40090 ksmbd: fix recursive locking in RPC handle list access	30 Oct 202509:47	–	cvelist
Debian CVE	CVE-2025-40090	30 Oct 202509:47	–	debiancve
EUVD	EUVD-2025-36988	30 Oct 202512:31	–	euvd
Microsoft CVE	ksmbd: fix recursive locking in RPC handle list access	31 Oct 202501:10	–	mscve
NVD	CVE-2025-40090	30 Oct 202510:15	–	nvd
OPENSUSE Linux	kernel-devel-6.17.7-1.1 on GA media (moderate)	5 Nov 202500:00	–	opensuse

Source	Link
git	www.git.kernel.org/stable/c/1891abe832cbf5a11039e088766131d0f1642d02
git	www.git.kernel.org/stable/c/3412fbd81b46b9cfae013817b61d4bbd27e09e36
git	www.git.kernel.org/stable/c/4602b8cee1481dbb896182e5cb1e8cf12910e9e7
git	www.git.kernel.org/stable/c/5493571f4351f74e11db9943e98a07c56467cf7e
git	www.git.kernel.org/stable/c/88f170814fea74911ceab798a43cbd7c5599bed4
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40090.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-40090
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

02 Apr 2026 12:48Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.5

EPSS0.00011