Out-of-Bounds Read Vulnerability in Linux Kernel - CVE-2025-22038
Summary
CVE-2025-22038: In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero num_subauth before sub_auth is accessed Access psid->sub_auth[psid->num_subauth - 1] without checking if num_subauth is non-zero le... Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, including various distributions of Debian. It manages system resources and hardware communication, providing essential services for software applications. The kernel is crucial for system stability and security, making it vital to address any vulnerabilities that may arise.
Vulnerability Detail
CVE-2025-22038 is a vulnerability in the Linux kernel related to the ksmbd module, which handles SMB (Server Message Block) protocol for file sharing. The issue arises when the code accesses the 'sub_auth' array without verifying that 'num_subauth' is greater than zero. This oversight can lead to an out-of-bounds read, potentially exposing sensitive information or causing system instability. The vulnerability has been patched to include a validation step, ensuring that 'num_subauth' is not zero before accessing 'sub_auth'.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
CVE-2025-22038 is a critical vulnerability in the Linux kernel that can lead to serious security issues if not addressed. It is essential for users of Debian systems to update their Linux packages to the latest version to mitigate this risk. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2025-22038 is a vulnerability in the Linux kernel that allows for out-of-bounds reads due to improper validation of the 'num_subauth' variable.
Exploiting this vulnerability could lead to unauthorized access to sensitive information or cause system crashes, impacting overall system stability.
If you are running Debian 11, 12, or 13 with the Linux kernel, your system may be affected. Use tools like Vulert to check for vulnerabilities in your application.
You can check your installed Linux kernel version by running 'uname -r' in the terminal. Compare it with the latest version available in the Debian repositories.
Vulert monitors open-source vulnerabilities in your software using just a manifest file like package-lock.json. You can use the Vulert playground to check if your application is affected by this vulnerability without needing to sign up.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
