Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-38501

Опубликовано: 16 авг. 2025
Источник: redhat
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit repeated connections from clients with the same IP Repeated connections from clients with the same IP address may exhaust the max connections and prevent other normal client connections. This patch limit repeated connections from clients with the same IP.

Отчет

This vulnerability presents no direct impact on Red Hat Enterprise Linux as the in-kernel SMB server (ksmbd) is neither enabled nor built in supported Red Hat kernels. The upstream flaw permits a remote attacker to induce a denial of service by initiating repetitive TCP sessions from a single host until connection thresholds are exhausted. Standard Red Hat environments rely on userspace Samba services rather than kernel-space file sharing, leaving default installations unaffected.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelNot affected
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtNot affected

Показывать по

Дополнительная информация

https://bugzilla.redhat.com/show_bug.cgi?id=2388909kernel: ksmbd: limit repeated connections from clients with the same IP

EPSS

Процентиль: 82%
0.0218
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit repeated connections from clients with the same IP Repeated connections from clients with the same IP address may exhaust the max connections and prevent other normal client connections. This patch limit repeated connections from clients with the same IP.

CVSS3: 7.5
nvd
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit repeated connections from clients with the same IP Repeated connections from clients with the same IP address may exhaust the max connections and prevent other normal client connections. This patch limit repeated connections from clients with the same IP.

CVSS3: 6.5
msrc
около 1 года назад

ksmbd: limit repeated connections from clients with the same IP

CVSS3: 7.5
debian
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: k ...

CVSS3: 7.5
github
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit repeated connections from clients with the same IP Repeated connections from clients with the same IP address may exhaust the max connections and prevent other normal client connections. This patch limit repeated connections from clients with the same IP.

EPSS

Процентиль: 82%
0.0218
Низкий