CVE-2025-38561

ksmbd: fix Preauh_HashValue race condition

State: Published
Severity: 9.8 Critical
Published: Aug 19, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix Preauh_HashValue race condition

If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	8.5 High	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	0626e6641f6b467447c81dd7678a69c66f7746cf to before fbf5c0845ed15122a770bca9be1d9b60b470d3aaAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before b69fd87076daa66f3d186bd421a7b0ee0cb45829Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before edeecc7871e8fc0878d53ce286c75040a0e38f6cAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fcAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 6613887da1d18dd2ecfd6c6148a873c4d903ebdcAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 44a3059c4c8cc635a1fb2afd692d0730ca1ba4b6Affected
LinuxLinux	5.15Affected before 5.15Not affected 6.1.148 through 6.1.Not affected 6.6.102 through 6.6.Not affected 6.12.42 through 6.12.Not affected 6.15.10 through 6.15.Not affected 6.16.1 through 6.16.*Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

0626e6641f6b467447c81dd7678a69c66f7746cf to before fbf5c0845ed15122a770bca9be1d9b60b470d3aaAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before b69fd87076daa66f3d186bd421a7b0ee0cb45829Affected
0626e6641f6b467447c81dd7678a69c66f7746cf to before edeecc7871e8fc0878d53ce286c75040a0e38f6cAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fcAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 6613887da1d18dd2ecfd6c6148a873c4d903ebdcAffected
0626e6641f6b467447c81dd7678a69c66f7746cf to before 44a3059c4c8cc635a1fb2afd692d0730ca1ba4b6Affected

LinuxLinux

5.15Affected
before 5.15Not affected
6.1.148 through 6.1.*Not affected
6.6.102 through 6.6.*Not affected
6.12.42 through 6.12.*Not affected
6.15.10 through 6.15.*Not affected
6.16.1 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.