PT-2025-33760

CVE-2025-38561

·

Published

2025-07-24

·

Updated

2026-10-18

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to the fix
Description The issue relates to a race condition within the Preauh HashValue() function of the ksmbd component in the Linux kernel. This occurs when a client sends multiple session setup requests to ksmbd. The problem stems from incorrect synchronization when a shared resource is used. The vulnerability could allow an attacker to cause a denial of service. The vulnerable function is Preauh HashValue(). The sess->Preauh HashValue variable is involved in the race condition.
Recommendations Update the Linux Kernel to the version containing the fix for this vulnerability.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
DLA-4328-1
ECHO-49EA-B826-1527
LSN-0118-1
MGASA-2025-0234
MGASA-2025-0235
OESA-2025-2886
OESA-2025-2887
USN-7879-1
USN-7879-2
USN-7879-3
USN-7879-4
USN-7880-1
USN-7934-1
USN-8013-1
USN-8013-2
USN-8013-3
USN-8013-4
USN-8015-1
USN-8015-2
USN-8015-3
USN-8015-4
USN-8015-5
USN-8016-1
USN-8052-1
USN-8074-1
USN-8074-2
USN-8126-1
ZDI-25-916
Found an issue in the description? Have something to add? Feel free to write us 👾