CVE-2025-22041 Affecting linux-virt-doc package, versions <6.12.14-r0


Severity

Recommended
low

Based on default assessment until relevant scores are available.

Threat Intelligence

EPSS
0.01% (2nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-MINIMOSLATEST-LINUXVIRTDOC-13309394
  • published6 Oct 2025
  • disclosed16 Apr 2025

Introduced: 16 Apr 2025

CVE-2025-22041  (opens in a new tab)

How to fix?

Upgrade Minimos:latest linux-virt-doc to version 6.12.14-r0 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream linux-virt-doc package and not the linux-virt-doc package as distributed by Minimos. See How to fix? for Minimos:latest relevant fixed versions and status.

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in ksmbd_sessions_deregister()

In multichannel mode, UAF issue can occur in session_deregister when the second channel sets up a session through the connection of the first channel. session that is freed through the global session table can be accessed again through ->sessions of connection.

CVSS Base Scores

version 3.1