high8.8
CVE-2025-37776
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in smb_break_all_…
Impact
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in smb_break_all_levII_oplock that can cause racy issues when unlocking in the middle of the loop. This patch use read lock to protect whole loop.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 5.15 before 6.6.88 from 6.7 before 6.12.25 from 6.13 before 6.14.4 Version 6.15 |
Weakness classification
References
- NVD record
- CVE.org record
- https://git.kernel.org/stable/c/18b4fac5ef17f77fed9417d22210ceafd6525fc7
- https://git.kernel.org/stable/c/296cb5457cc6f4a754c4ae29855f8a253d52bcc6
- https://git.kernel.org/stable/c/d54ab1520d43e95f9b2e22d7a05fc9614192e5a5
- https://git.kernel.org/stable/c/d73686367ad68534257cd88a36ca3c52cb8b81d8