PT-2025-22215 · Linux+5 · Linux Kernel+5

Published

2025-05-07

·

Updated

2026-05-26

·

CVE-2025-37954

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A race condition in the Linux kernel's SMB client can occur when a pre-existing valid cfid returned from find or create cached dir might race with a lease break. This can cause open cached dir to not consider the cfid valid and think it's newly-constructed, leading to a dentry reference leak if the allocation occurs before the queued lease break work runs.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2026-01387
CVE-2025-37954
ECHO-36DD-7D11-9E95
MGASA-2025-0182
MGASA-2025-0183
OESA-2026-1759
OESA-2026-1760
OESA-2026-1761
SUSE-SU-2025:01964-1
SUSE-SU-2025:01965-1
SUSE-SU-2025:02000-1
SUSE-SU-2025:02254-1
SUSE-SU-2025:02307-1
SUSE-SU-2025:02333-1
SUSE-SU-2025:02923-1
SUSE-SU-2025:20408-1
SUSE-SU-2025:20413-1
SUSE-SU-2025:20419-1
SUSE-SU-2025:20421-1
SUSE-SU-2025_01964-1
SUSE-SU-2025_01965-1
SUSE-SU-2025_02000-1
SUSE-SU-2025_02254-1
SUSE-SU-2025_02307-1
SUSE-SU-2025_02333-1
USN-7699-1
USN-7699-2
USN-7721-1
USN-7775-1
USN-7775-2
USN-7775-3
USN-7802-1
USN-7809-1
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2

Affected Products

Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu