CVE-2025-37926

ksmbd: fix use-after-free in ksmbd_session_rpc_open

State: Published
Severity: 8.8 High
Published: May 20, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in ksmbd_session_rpc_open

A UAF issue can occur due to a race condition between ksmbd_session_rpc_open() and __session_rpc_close(). Add rpc_lock to the session to protect it.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0626e6641f6b467447c81dd7678a69c66f7746cf to before a4348710a7267705b75692dc1a000920481d1d92Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 1067361a1cc6ad9cdf7acfc47f90012b72ad1502Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 8fb3b6c85b7e3127161623586b62abcc366caa20Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 6323fec65fe54b365961fed260dd579191e46121Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before a1f46c99d9ea411f9bf30025b912d881d36fc709Affected
LinuxLinux	5.15Affected before 5.15Not affected 6.1.162 through 6.1.Not affected 6.6.122 through 6.6.Not affected 6.12.28 through 6.12.Not affected 6.14.6 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

0626e6641f6b467447c81dd7678a69c66f7746cf to before a4348710a7267705b75692dc1a000920481d1d92Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 1067361a1cc6ad9cdf7acfc47f90012b72ad1502Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 8fb3b6c85b7e3127161623586b62abcc366caa20Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 6323fec65fe54b365961fed260dd579191e46121Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before a1f46c99d9ea411f9bf30025b912d881d36fc709Affected

LinuxLinux

5.15Affected
before 5.15Not affected
6.1.162 through 6.1.*Not affected
6.6.122 through 6.6.*Not affected
6.12.28 through 6.12.*Not affected
6.14.6 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.