Slab Out of Bounds Vulnerability in Linux Kernel - CVE-2025-38728
Summary
CVE-2025-38728: In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing c... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system, including process management, memory management, and device control. The kernel's stability and security are critical, as vulnerabilities can lead to system crashes or unauthorized access.
Vulnerability Detail
CVE-2025-38728 is a vulnerability in the Linux kernel that allows for a slab out of bounds error during the mounting process to ksmbd, a kernel-based SMB server. This issue arises from a missing check in the parse_server_interfaces() function, which can lead to memory corruption and potential system instability. The vulnerability is particularly concerning when KASAN (Kernel Address Sanitizer) is enabled, as it can expose the system to further risks, including unauthorized access to sensitive data or denial of service.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available.
Conclusion
CVE-2025-38728 is a significant vulnerability in the Linux kernel that can lead to serious security risks. It is crucial for users to update their systems to the patched versions to mitigate these risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38728 is a vulnerability in the Linux kernel that can cause a slab out of bounds error during the mounting process to ksmbd.
The vulnerability can lead to memory corruption, system instability, and potential unauthorized access to sensitive data.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without any signup.
The vulnerability affects multiple versions of the Linux kernel across Debian 11, 12, 13, and 14.
You can update your Linux package using the commands: sudo apt-get update followed by sudo apt-get install linux, ensuring you install the patched version.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
