Riskcovery

CVE-2025-37899

ksmbd: fix use-after-free in session logoff

State
Published
Severity
8.8 High
Published
May 20, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in session logoff

The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd. The handler for that connection could be in the smb2_sess_setup function which makes use of sess->user.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 931dc8a3670f71c45c0b1379ea4e92dafbda1acaAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 70ad6455139e26e85f48f95d0e21f351c1909342Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before d5ec1d79509b3ee01de02c236f096bc050221b7fAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 02d16046cd11a5c037b28c12ffb818c56dd3ef43Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 2fc9feff45d92a92cd5f96487655d5be23fb7e2bAffected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.1.159 through 6.1.*Not affected
  • 6.6.119 through 6.6.*Not affected
  • 6.12.28 through 6.12.*Not affected
  • 6.14.6 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.