Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-37776

ksmbd: fix use-after-free in smb_break_all_levII_oplock()

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in smb_break_all_levII_oplock that can cause racy issues when unlocking in the middle of the loop. This patch use read lock to protect whole loop.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 296cb5457cc6f4a754c4ae29855f8a253d52bcc6affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < d54ab1520d43e95f9b2e22d7a05fc9614192e5a5affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < d73686367ad68534257cd88a36ca3c52cb8b81d8affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 18b4fac5ef17f77fed9417d22210ceafd6525fc7affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 6.6.88 to ≤ 6.6.*unaffected
  • 6.12.25 to ≤ 6.12.*unaffected
  • 6.14.4 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References