by Kastro CVE-2025-38561
Linux Linux — ksmbd: fix Preauh_HashValue race condition
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.
Affected
ProductAffectedFixed inSource
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < fbf5c0845ed15122a770bca9be1d9b60b470d3aafbf5c0845ed15122a770bca9be1d9b60b470d3aaCNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < b69fd87076daa66f3d186bd421a7b0ee0cb45829b69fd87076daa66f3d186bd421a7b0ee0cb45829CNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < edeecc7871e8fc0878d53ce286c75040a0e38f6cedeecc7871e8fc0878d53ce286c75040a0e38f6cCNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < 7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fc7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fcCNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < 6613887da1d18dd2ecfd6c6148a873c4d903ebdc6613887da1d18dd2ecfd6c6148a873c4d903ebdcCNA
Linux0626e6641f6b467447c81dd7678a69c66f7746cf – < 44a3059c4c8cc635a1fb2afd692d0730ca1ba4b644a3059c4c8cc635a1fb2afd692d0730ca1ba4b6CNA
Linux5.15–CNA
Scores by source
Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP8.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total