Back to KEVs

CVE-2025-37899

ksmbd: fix use-after-free in session logoff

Basic Information

CVE State
PUBLISHED
Reserved Date
April 16, 2025
Published Date
May 20, 2025
Last Updated
May 11, 2026
Vendor
Linux
Product
Linux
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd. The handler for that connection could be in the smb2_sess_setup function which makes use of sess->user.

CVSS Scores

CVSS v3.1

7.8 - HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploit Status

Exploited in the Wild
Yes (2025-10-08 20:07:17 UTC) Source

References

https://git.kernel.org/stable/c/931dc8a3670f71c45c0b1379ea4e92dafbda1aca https://git.kernel.org/stable/c/70ad6455139e26e85f48f95d0e21f351c1909342 https://git.kernel.org/stable/c/d5ec1d79509b3ee01de02c236f096bc050221b7f https://git.kernel.org/stable/c/02d16046cd11a5c037b28c12ffb818c56dd3ef43 https://git.kernel.org/stable/c/2fc9feff45d92a92cd5f96487655d5be23fb7e2b

Known Exploited Vulnerability Information

Source Added Date
The Shadowserver (via CIRCL) 2025-10-08 20:07:17 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel