CVE-2025-37924: ksmbd: fix use-after-free in kerberos authentication
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in kerberos authentication
Setting sess->user = NULL was introduced to fix the dangling pointer created by ksmbdfreeuser. However, it is possible another thread could be operating on the session and make use of sess->user after it has been passed to ksmbdfreeuser but before sess->user is set to NULL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Apply the kernel fix that sets sess->user = NULL to prevent use-after-free (dangling pointer) in ksmbd kerberos authentication.
Linux kernel ksmbd (Kerberos authentication) sess->user = NULL
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37924?
CVE-2025-37924 has been assessed as a high severity vulnerability due to the potential for a use-after-free condition during kerberos authentication.
How do I fix CVE-2025-37924?
To address CVE-2025-37924, ensure that you update the Linux kernel to the latest patched version that includes the fix for this vulnerability.
What systems are affected by CVE-2025-37924?
CVE-2025-37924 affects the Linux kernel, specifically versions prior to the patch that addresses the kerberos authentication use-after-free issue.
What are the potential impacts of CVE-2025-37924?
Exploitation of CVE-2025-37924 could lead to arbitrary code execution or system crashes due to a use-after-free vulnerability.
Is CVE-2025-37924 related to any specific Linux kernel versions?
CVE-2025-37924 is relevant to multiple versions of the Linux kernel that incorporate ksmbd and kerberos authentication functionalities.