Linux Kernel SMB2 Client Delayed Work Queue Vulnerability

Vulnerability

A vulnerability in the Linux kernel's SMB2 client implementation can lead to a warning being triggered when reconnecting a channel. This issue arises because a dummy connection is sent to the reconnection function with an uninitialized query interface, preventing the proper queuing of delayed work. The vulnerability has been addressed by ensuring that the delayed work is queued from the correct connection.

Impact

The vulnerability can cause a warning to be issued, indicating a potential issue with how delayed work is managed in the SMB2 client.

Reproduction

The vulnerability can be reproduced by using the CIFS (Common Internet File System) module in the Linux kernel. When the SMB2 client reconnects to a server, a dummy connection is improperly initialized, leading to a warning about the delayed work queue. This can be observed in the kernel's workqueue management, where the warning indicates that the delayed work was not queued correctly due to the uninitialized connection interface.

Added: Jul 25, 2025, 2:24 PM
Updated: Jul 25, 2025, 2:24 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
5.7
remediation
0.0
relevance
0.3
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.