CVE-2025-38561
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
In the Linux kernel's ksmbd module, a race condition was found regarding Preauh_HashValue. When a client sends multiple session requests, improper freeing of Preauh_HashValue memory can occur.
Risk Assessment
The organization is at risk of credential integrity issues in SMB sessions, potentially leading to unauthorized access.
Recommendation
Update the Linux kernel to a version containing the fix that removes unnecessary freeing of Preauh_HashValue during session setup.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.