CVE-2025-37926

Summary

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in ksmbd_session_rpc_open

A UAF issue can occur due to a race condition between ksmbd_session_rpc_open() and __session_rpc_close(). Add rpc_lock to the session to protect it.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux0626e6641f6b467447c81dd7678a69c66f7746cf < a4348710a7267705b75692dc1a000920481d1d92affected
LinuxLinux0626e6641f6b467447c81dd7678a69c66f7746cf < 1067361a1cc6ad9cdf7acfc47f90012b72ad1502affected
LinuxLinux0626e6641f6b467447c81dd7678a69c66f7746cf < 8fb3b6c85b7e3127161623586b62abcc366caa20affected
LinuxLinux0626e6641f6b467447c81dd7678a69c66f7746cf < 6323fec65fe54b365961fed260dd579191e46121affected
LinuxLinux0626e6641f6b467447c81dd7678a69c66f7746cf < a1f46c99d9ea411f9bf30025b912d881d36fc709affected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux6.1.162 <= 6.1.*unaffected
LinuxLinux6.6.122 <= 6.6.*unaffected
LinuxLinux6.12.28 <= 6.12.*unaffected
LinuxLinux6.14.6 <= 6.14.*unaffected
LinuxLinux6.15 <= *unaffected

Weaknesses

References