CVE-2025-37776

ksmbd: fix use-after-free in smb_break_all_levII_oplock()

published May 1, 2025

CVSS
—
EPSS
0%
Percentile
27.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in smb_break_all_levII_oplock()

There is a room in smb_break_all_levII_oplock that can cause racy issues

when unlocking in the middle of the loop. This patch use read lock

to protect whole loop.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00354 · 27.9th percentile
Published
2025-05-01T13:07Z
EPSS history
Timeline
  • 01 MAY 13:07Z
    ksmbd: fix use-after-free in smb_break_all_levII_oplock()
    cvelistv5