Beveiligingsadvies

CVE-2025-38437

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-25 15:27:16
Laatst bijgewerkt 2026-08-05 12:01:53
Toegewezen door Linux
CVSS-score 8.8
Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbd_iov_pin_rsp return error, use-after-free can happen by accessing opinfo->state and opinfo_put and ksmbd_fd_put could called twice.