Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2025-37926 Details

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_session_rpc_open A UAF issue can occur due to a race condition between ksmbd_session_rpc_open() and __session_rpc_close(). Add rpc_lock to the session to protect it.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: kernel.orgCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/1067361a1cc6ad9cdf7acfc47f90012b72ad1502 kernel.orgPatch
https://git.kernel.org/stable/c/6323fec65fe54b365961fed260dd579191e46121 kernel.orgPatch
https://git.kernel.org/stable/c/8fb3b6c85b7e3127161623586b62abcc366caa20 kernel.orgPatch
https://git.kernel.org/stable/c/a1f46c99d9ea411f9bf30025b912d881d36fc709 kernel.orgPatch
https://git.kernel.org/stable/c/a4348710a7267705b75692dc1a000920481d1d92 kernel.orgPatch

Weakness Enumeration

CWE-IDCWE NameSource
CWE-416Use After Free[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 5.15, < 6.12.28
>= 6.13, < 6.14.6
6.15 rc1
6.15 rc2
6.15 rc3

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2025-37926
NVD Published Date:
May 20, 2025
NVD Last Modified:
Jul 30, 2026
Source:
kernel.org
CVE-2025-37926 Details - Not Deferred