CVE-2025-22042 ksmbd: add bounds check for create lease context

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses ksmbd Vulnerabilities CVE-2025-22042 and CVE-2025-22043 Microsoft has published information regarding two vulnerabilities in ksmbd: CVE-2025-22042 and CVE-2025-22043. Both vulnerabilities were published on April 16, 2025, and involve adding bounds checks for lease and durable handle contexts, respectively, affecting systems utilizing ksmbd. 2 sources 39