PT-2025-22187 · Linux+5 · Linux Kernel+5

Published

2025-04-22

·

Updated

2026-06-16

·

CVE-2025-37926

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A use-after-free issue can occur due to a race condition between the ksmbd session rpc open() and session rpc close() functions. This is resolved by adding rpc lock to the session to protect it.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416CWE-119

Related Identifiers

BDU:2026-02237
CVE-2025-37926
ECHO-5230-5CA0-0D39
OESA-2025-1625
OESA-2025-1629
USN-7649-1
USN-7649-2
USN-7650-1
USN-7665-1
USN-7665-2
USN-7721-1
USN-8278-1
USN-8278-2
USN-8289-1
USN-8289-2
USN-8296-1
USN-8296-2
USN-8393-1
USN-8440-1

Affected Products

Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu