CVE-2025-37777

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been resolved in the Linux kernel, specifically in the ksmbd component. The problem occurs when the ksmbd connection is referenced after the ksmbd server thread terminates, causing the conn->tcp transport to be freed prematurely. The smb2 lease break noti function can be executed asynchronously when a connection is disconnected, leading to a use-after-free error when conn->ksmbd transport is accessed after being freed. This issue is related to the ksmbd conn write function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.