-

CVE-2025-38561

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix Preauh_HashValue race condition

If client send multiple session setup requests to ksmbd,
Preauh_HashValue race condition could happen.
There is no need to free sess->Preauh_HashValue at session setup phase.
It can be freed together with session at connection termination phase.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
≫
Product Linux
Default Statusunaffected
Version < fbf5c0845ed15122a770bca9be1d9b60b470d3aa
Version 0626e6641f6b467447c81dd7678a69c66f7746cf
Status affected
Version < b69fd87076daa66f3d186bd421a7b0ee0cb45829
Version 0626e6641f6b467447c81dd7678a69c66f7746cf
Status affected
Version < edeecc7871e8fc0878d53ce286c75040a0e38f6c
Version 0626e6641f6b467447c81dd7678a69c66f7746cf
Status affected
Version < 7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fc
Version 0626e6641f6b467447c81dd7678a69c66f7746cf
Status affected
Version < 6613887da1d18dd2ecfd6c6148a873c4d903ebdc
Version 0626e6641f6b467447c81dd7678a69c66f7746cf
Status affected
Version < 44a3059c4c8cc635a1fb2afd692d0730ca1ba4b6
Version 0626e6641f6b467447c81dd7678a69c66f7746cf
Status affected
VendorLinux
≫
Product Linux
Default Statusaffected
Version 5.15
Status affected
Version < 5.15
Version 0
Status unaffected
Version <= 6.1.*
Version 6.1.148
Status unaffected
Version <= 6.6.*
Version 6.6.102
Status unaffected
Version <= 6.12.*
Version 6.12.42
Status unaffected
Version <= 6.15.*
Version 6.15.10
Status unaffected
Version <= 6.16.*
Version 6.16.1
Status unaffected
Version <= *
Version 6.17
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.089
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string