PT-2025-33760 · Linux +1 · Linux Kernel +1

Published

2025-07-25

·

Updated

2025-09-25

·

CVE-2025-38561

CVSS v2.0
4.6
VectorAV:L/AC:L/Au:S/C:N/I:N/A:C

**Name of the Vulnerable Software and Affected Versions**

Linux Kernel versions prior to the fix

**Description**

The issue relates to a race condition within the `Preauh HashValue()` function of the ksmbd component in the Linux kernel. This occurs when a client sends multiple session setup requests to ksmbd. The problem stems from incorrect synchronization when a shared resource is used. The vulnerability could allow an attacker to cause a denial of service. The vulnerable function is `Preauh HashValue()`. The `sess->Preauh HashValue` variable is involved in the race condition.

**Recommendations**

Update the Linux Kernel to the version containing the fix for this vulnerability.

Fix

Race Condition

Weakness Enumeration

Related Identifiers

BDU:2025-10729
CVE-2025-38561
ZDI-25-916

Affected Products

Debian
Linux Kernel