Use-After-Free Vulnerability in Linux Kernel: ksmbd Package Impact
Summary
CVE-2025-37926: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_session_rpc_open A UAF issue can occur due to a race condition between ksmbd_session_rpc_open() and __session_rpc_clo... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is widely used in various distributions, including Debian. The ksmbd package is a server implementation of the SMB protocol, allowing file sharing and printing services. This vulnerability affects the ksmbd session management, potentially leading to security risks.
Vulnerability Detail
The vulnerability identified as CVE-2025-37926 is a use-after-free (UAF) issue that arises from a race condition between the functions ksmbd_session_rpc_open() and __session_rpc_close(). This flaw can lead to unauthorized access or manipulation of memory, posing significant security risks to systems utilizing the ksmbd package.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As of now, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available.
Conclusion
The CVE-2025-37926 vulnerability in the Linux kernel's ksmbd package poses serious security risks due to a use-after-free condition. Users are advised to update their systems to the latest patched version to protect against potential exploits.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37926 is a vulnerability in the Linux kernel's ksmbd package that can lead to a use-after-free condition, potentially allowing unauthorized memory access.
If exploited, this vulnerability can lead to memory corruption, unauthorized access, or manipulation of system resources, compromising system security.
The vulnerability affects the Linux kernel across multiple Debian versions, including Debian 11, 12, and 13.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
While there are no specific workarounds available, it is crucial to monitor for updates and apply them as soon as possible to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
