CVE-2025-37776

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-37776

7.0 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in smb_break_all_levII_oplock that can cause racy issues when unlocking in the middle of the loop. This patch use read lock to protect whole loop.

References
Link Resource
https://git.kernel.org/stable/c/18b4fac5ef17f77fed9417d22210ceafd6525fc7 Patch
https://git.kernel.org/stable/c/296cb5457cc6f4a754c4ae29855f8a253d52bcc6 Patch
https://git.kernel.org/stable/c/d54ab1520d43e95f9b2e22d7a05fc9614192e5a5 Patch
https://git.kernel.org/stable/c/d73686367ad68534257cd88a36ca3c52cb8b81d8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
History

14 Nov 2025, 16:45

Type Values Removed Values Added
CWE CWE-416
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.0
CPE cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: se corrige el error "use-after-free" en smb_break_all_levII_oplock(). Existe una zona en smb_break_all_levII_oplock que puede causar problemas de velocidad al desbloquear en medio del bucle. Este parche utiliza un bloqueo de lectura para proteger todo el bucle.
References () https://git.kernel.org/stable/c/18b4fac5ef17f77fed9417d22210ceafd6525fc7 - () https://git.kernel.org/stable/c/18b4fac5ef17f77fed9417d22210ceafd6525fc7 - Patch
References () https://git.kernel.org/stable/c/296cb5457cc6f4a754c4ae29855f8a253d52bcc6 - () https://git.kernel.org/stable/c/296cb5457cc6f4a754c4ae29855f8a253d52bcc6 - Patch
References () https://git.kernel.org/stable/c/d54ab1520d43e95f9b2e22d7a05fc9614192e5a5 - () https://git.kernel.org/stable/c/d54ab1520d43e95f9b2e22d7a05fc9614192e5a5 - Patch
References () https://git.kernel.org/stable/c/d73686367ad68534257cd88a36ca3c52cb8b81d8 - () https://git.kernel.org/stable/c/d73686367ad68534257cd88a36ca3c52cb8b81d8 - Patch
First Time Linux linux Kernel
Linux

01 May 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-01 14:15

Updated : 2025-11-14 16:45

NVD link : CVE-2025-37776

Mitre link : CVE-2025-37776

CVE.ORG link : CVE-2025-37776

JSON object : View

Products Affected

linux

CWE
CWE-416

Use After Free