exploitDog

CVE-2025-38561

Опубликовано: 19 авг. 2025

Источник: nvd

CVSS3: 4.7

CVSS3: 8.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix Preauh_HashValue race condition

If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.15 (включая) до 6.1.148 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.102 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.42 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.15.10 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.16 (включая) до 6.16.1 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 8%

0.00028

Низкий

4.7 Medium

CVSS3

8.5 High

CVSS3

Дефекты

CWE-362

CWE-362

Связанные уязвимости

CVE-2025-38561

CVSS3: 4.7

ubuntu

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.

CVE-2025-38561

CVSS3: 5.5

redhat

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.

CVE-2025-38561

msrc

5 месяцев назад

ksmbd: fix Preauh_HashValue race condition

CVE-2025-38561

CVSS3: 4.7

debian

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: k ...

GHSA-6mwh-579p-fgpg

CVSS3: 8.5

github

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.

EPSS

Процентиль: 8%

0.00028

Низкий

4.7 Medium

CVSS3

8.5 High

CVSS3

Дефекты

CWE-362

CWE-362