CISA-2025-38561 — Vulnetix

CISA-2025-38561 PUBLISHED CVSS 8.5 HIGH

Reported by Linux · Published August 19, 2025

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.

Risk Scores

CVSS 3.1

8.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Linux	Linux	0626e6641f6b467447c81dd7678a69c66f7746cf, 0626e6641f6b467447c81dd7678a69c66f7746cf, 0626e6641f6b467447c81dd7678a69c66f7746cf
Linux	Linux	5.15, 0, 6.1.148
Linux	Linux	*, 0626e6641f6b467447c81dd7678a69c66f7746cf, 0626e6641f6b467447c81dd7678a69c66f7746cf
linux	linux_kernel	5.15, 5.15, 5.15

Timeline

Aug 19, 2025 CVE Published
Nov 3, 2025 CVE Updated

References

https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html url

Open in Interactive Console →