CVE-2025-37924CWE-416

CVE-2025-37924

Critical · published May 20, 2025

CVSS v3.1
9.8
EPSS
22%
Percentile
97.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in kerberos authentication

Setting sess->user = NULL was introduced to fix the dangling pointer

created by ksmbd_free_user. However, it is possible another thread could

be operating on the session and make use of sess->user after it has been

passed to ksmbd_free_user but before sess->user is set to NULL.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.22055 · 97.7th percentile
Weakness
CWE-416 · Use After Free
Published
2025-05-20T20:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15, < 6.1.1386.1.138
linux/linux_kernel≥ 6.2, < 6.6.906.6.90
linux/linux_kernel≥ 6.7, < 6.12.286.12.28
linux/linux_kernel≥ 6.13, < 6.14.66.14.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (6)
https://git.kernel.org/stable/c/28c756738af44a404a91b77830d017bb0c525890 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b447463562238428503cfba1c913261047772f90 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e18c616718018dfc440e4a2d2b94e28fe91b1861 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e34a33d5d7e87399af0a138bb32f6a3e95dd83d2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e86e9134e1d1c90a960dd57f59ce574d27b9a124 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 20 MAY 15:21Z
    ksmbd: fix use-after-free in kerberos authentication
    cvelistv5