CVE-2025-21673

CVE-2025-21673 affects the Linux kernel CIFS/SMB client logic. The flaw is a double free of TCP_Server_Info::hostname during server shutdown in cifs_put_tcp_session(), where cifsd threads reconnect to multiple DFS targets and may still hold server->hostname, risking use-after-free or kernel in...

CVE-2024-35998

In the Linux kernel, the following vulnerability has been resolved: smb3: fix lock ordering potential deadlock in cifssyncmidresult Coverity spotted that the cifssyncmidresult function could deadlock "Thread deadlock ORDERREVERSAL lockorder: Calling spinlock acquires lock TCPServerInfo.srvlock...