Riskcovery

CVE-2025-38562

ksmbd: fix null pointer dereference error in generate_encryptionkey

State
Published
Severity
Not scored
Published
Aug 19, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix null pointer dereference error in generate_encryptionkey

If client send two session setups with krb5 authenticate to ksmbd, null pointer dereference error in generate_encryptionkey could happen. sess->Preauth_HashValue is set to NULL if session is valid. So this patch skip generate encryption key if session is valid.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 922f85e6e88fdea723a26854c3a6dcb4beb8d0b9Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 96a82e19434a2522525baab59c33332658bc7653Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before d79c8bebaa622ee223128be7c66d8aaeeb634a57Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 2a30ed6428ce83afedca1a6c5c5c4247bcf12d0eAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 015ef163d65496ae3ba6192c96140a22743f0353Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 9c2dbbc959e1fcc6f603a1a843e9cf743ba383bbAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 9b493ab6f35178afd8d619800df9071992f715deAffected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.203 through 5.15.*Not affected
  • 6.1.148 through 6.1.*Not affected
  • 6.6.102 through 6.6.*Not affected
  • 6.12.42 through 6.12.*Not affected
  • 6.15.10 through 6.15.*Not affected
  • 6.16.1 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.