CVE-2025-38437: ksmbd: fix potential use-after-free in oplock/lease break ack
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix potential use-after-free in oplock/lease break ack
If ksmbdiovpinrsp return error, use-after-free can happen by accessing opinfo->state and opinfoput and ksmbdfdput could called twice.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38437?
CVE-2025-38437 is categorized as a high severity vulnerability due to the potential for use-after-free vulnerabilities leading to arbitrary code execution.
How do I fix CVE-2025-38437?
To fix CVE-2025-38437, users should update the Linux kernel to the latest version where the vulnerability has been patched.
What systems are affected by CVE-2025-38437?
CVE-2025-38437 affects all versions of the Linux kernel using the ksmbd module.
What are the consequences of not addressing CVE-2025-38437?
Failure to address CVE-2025-38437 could lead to system crashes, data corruption, or unauthorized access to sensitive information.
Is there a known exploit for CVE-2025-38437?
As of now, there have been no public disclosures of an active exploit for CVE-2025-38437, but potential for exploitation exists.