Use-After-Free Vulnerability in Linux Kernel: Impacting Debian Packages
Summary
DEBIAN-CVE-2025-37952: In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in close_file_table_ids A use-after-free is possible if one thread destroys the file via ksmbd_close_fd while another thread holds a refe... Affects linux versions < 6.12.29-1. Fixed in 6.12.29-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used across various distributions, including Debian. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically in the ksmbd module, which handles SMB file sharing. The vulnerability arises from improper handling of file references, leading to potential security risks.
Vulnerability Detail
In the Linux kernel, a use-after-free vulnerability has been identified in the ksmbd module. This issue occurs when one thread destroys a file while another thread still holds a reference to it. The existing reference count checks are inadequate to prevent this scenario, which could lead to undefined behavior, data corruption, or potential system crashes. The vulnerability is particularly concerning in multi-threaded environments where concurrent access to file resources is common.
How To Fix
Minimum fixed version
6.12.29-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating the package to the latest version.
Conclusion
The identified use-after-free vulnerability in the Linux kernel poses significant risks, particularly in multi-threaded environments. Users of Debian 13 and 14 are urged to update their systems to the patched version 6.12.29-1 to mitigate these risks. Regular updates and monitoring are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to unpredictable behavior or security breaches.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities. Visit Vulert Scanner to check if your application is affected without any signup.
The risks include data corruption, system crashes, and potential exploitation by attackers to gain unauthorized access or control over the system.
While this vulnerability is documented for Debian packages, similar vulnerabilities may exist in other distributions using the affected Linux kernel versions.
It is recommended to regularly check for updates and apply them promptly to ensure that your system is protected against known vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
