CVE-2025-37776 – Linux ksmbd Use-After-Free Vulnerability

The following table lists the changes that have been made to the
CVE-2025-37776 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    May. 01, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    ksmbd: fix use-after-free in smb_break_all_levII_oplock()

    There is a room in smb_break_all_levII_oplock that can cause racy issues
    when unlocking in the middle of the loop. This patch use read lock
    to protect whole loop.

    Added Reference https://git.kernel.org/stable/c/18b4fac5ef17f77fed9417d22210ceafd6525fc7
    Added Reference https://git.kernel.org/stable/c/296cb5457cc6f4a754c4ae29855f8a253d52bcc6
    Added Reference https://git.kernel.org/stable/c/d54ab1520d43e95f9b2e22d7a05fc9614192e5a5
    Added Reference https://git.kernel.org/stable/c/d73686367ad68534257cd88a36ca3c52cb8b81d8
Share the Post:

Related Posts