by Kastro
Paper/Archive/CVE-2025-38325

CVE-2025-38325

Linux Linux — ksmbd: add free_transport ops in ksmbd connection

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 40.3.403 × 208.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add free_transport ops in ksmbd connection free_transport function for tcp connection can be called from smbdirect. It will cause kernel oops. This patch add free_transport ops in ksmbd connection, and add each free_transports for tcp and smbdirect.

Affected

ProductAffectedFixed inSource
Linux1da8bd9a10ecd718692732294d15fd801c0eabb5 – < 52f5a52dc17a4a7b4363ac03fe2c4ef26f020dc652f5a52dc17a4a7b4363ac03fe2c4ef26f020dc6CNA
Linux1aec4d14cf81b7b3e7b69eb1cfa94144eed7138e – < 3890da762a66191c440b0bd6e3ee45501edbb0c13890da762a66191c440b0bd6e3ee45501edbb0c1CNA
Linux21a4e47578d44c6b37c4fc4aba8ed7cc8dbb13de – < 3f3aae77280aad9f5acc6709c596148966f765c73f3aae77280aad9f5acc6709c596148966f765c7CNA
Linux21a4e47578d44c6b37c4fc4aba8ed7cc8dbb13de – < a89f5fae998bdc4d0505306f93844c9ae059d50ca89f5fae998bdc4d0505306f93844c9ae059d50cCNA
Linuxe59796fc80603bcd8569d4d2e10b213c1918edb4–CNA
Linux6.12.26 – < 6.12.356.12.35CNA
Linux6.14.4 – < 6.156.15CNA
Linux6.156.12.35CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/52f5a52dc17a4a7b4363ac03fe2c4ef26f020dc6refgit.kernel.org/stable/c/3890da762a66191c440b0bd6e3ee45501edbb0c1refgit.kernel.org/stable/c/3f3aae77280aad9f5acc6709c596148966f765c7refgit.kernel.org/stable/c/a89f5fae998bdc4d0505306f93844c9ae059d50c