imPC@ndo IT

Tracker / CVE-2025-38561

CVE-2025-38561

Critical 9.8

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.

Affected products and versions

debian debian_linux
linux linux_kernel · 5.15 → 6.1.148
linux linux_kernel · 6.13 → 6.15.10
linux linux_kernel · 6.16 → 6.16.1
linux linux_kernel · 6.2 → 6.6.102
linux linux_kernel · 6.7 → 6.12.42

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References