Use-After-Free Vulnerability in Linux Kernel's SMB Client: CVE-2025-38488
Summary
CVE-2025-38488: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from crypt_message(... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It supports various functionalities, including file systems, process management, and networking. The SMB (Server Message Block) client in the Linux kernel facilitates file sharing and network communication. This vulnerability affects the SMB client, specifically in its handling of asynchronous cryptographic operations, which can lead to system instability and crashes.
Vulnerability Detail
The vulnerability identified as CVE-2025-38488 arises from a use-after-free condition in the SMB client's cryptographic message handling. The issue originates from a fix implemented for CVE-2024-50047, which removed asynchronous crypto handling from the crypt_message function, assuming all operations would be synchronous. However, when hardware crypto accelerators are utilized, this assumption fails, leading to potential crashes due to dereferencing freed memory. The vulnerability can result in kernel crashes with NULL pointer dereferences, severely impacting system stability and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it becomes available to mitigate the risk.
Conclusion
CVE-2025-38488 is a critical vulnerability in the Linux kernel's SMB client that can lead to severe system crashes due to improper handling of asynchronous cryptographic operations. Users are strongly encouraged to update their systems to the latest kernel version to ensure protection against this vulnerability.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38488 is a use-after-free vulnerability in the Linux kernel's SMB client that can lead to system crashes.
This vulnerability can cause kernel crashes, resulting in system instability and potential data loss.
Yes, users should update their Linux kernel to the latest version to receive the patch for CVE-2025-38488.
Yes, you can use Vulert's playground at Vulert Scanner to check if your application is affected without any signup.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
