CVE-2025-38325
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
In the Linux kernel ksmbd (SMB) server, the free_transport function for TCP connections can be called from smbdirect context, causing a kernel oops. A free_transport operation was added to the connection structure with separate implementations for TCP and smbdirect.
Risk Assessment
The bug can cause a kernel oops when closing SMB connections, leading to service disruption and potential data loss.
Recommendation
Update the Linux kernel to a version containing the patch that adds separate free_transport functions for TCP and smbdirect in the ksmbd server.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add free_transport ops in ksmbd connection free_transport function for tcp connection can be called from smbdirect. It will cause kernel oops. This patch add free_transport ops in ksmbd connection, and add each free_transports for tcp and smbdirect.