CVE-2025-37778

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A dangling pointer issue in the krb authenticate function has been identified. The krb authenticate function frees sess->user but does not set the pointer to NULL. It then calls ksmbd krb5 authenticate to reinitialize sess->user, but this function may return without doing so. As a result, smb2 sess setup, which calls krb authenticate, may access freed memory when it later uses sess->user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.