Critical 9.8Published May 20, 2025

CVE-2025-37924ksmbd: fix use-after-free in kerberos authentication

Updated under an hour ago (Oct 28, 2026, 2:30 AM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authentication Setting sess->user = NULL was introduced to fix the dangling pointer created by ksmbd_free_user. However, it is possible another thread could be operating on the session and make use of sess->user after it has been passed to ksmbd_free_user but before sess->user is set to NULL.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 0626e6641f6b467447c81dd7678a69c66f7746cf before e34a33d5d7e87399af0a138bb32f6a3e95dd83d2; from 0626e6641f6b467447c81dd7678a69c66f7746cf before b447463562238428503cfba1c913261047772f90; from 0626e6641f6b467447c81dd7678a69c66f7746cf before e18c616718018dfc440e4a2d2b94e28fe91b1861; 0626e6641f6b467447c81dd7678a69c66f7746cf builds before 28c756738af44a404a91b77830d017bb0c525890; from 0626e6641f6b467447c81dd7678a69c66f7746cf before e86e9134e1d1c90a960dd57f59ce574d27b9a124	CNA record
linux linux_kernel linux:linux_kernel	from 5.15 before 6.1.138; from 6.2 before 6.6.90; from 6.7 before 6.12.28; from 6.13 before 6.14.6; 6.15; 6.15; 6.15; 6.15	NVD
debian debian_linux debian:debian_linux	11.0	NVD

References

References

https://git.kernel.org/stable/c/e34a33d5d7e87399af0a138bb32f6a3e95dd83d2	patch
https://git.kernel.org/stable/c/b447463562238428503cfba1c913261047772f90	patch
https://git.kernel.org/stable/c/e18c616718018dfc440e4a2d2b94e28fe91b1861	patch
https://git.kernel.org/stable/c/28c756738af44a404a91b77830d017bb0c525890	patch
https://git.kernel.org/stable/c/e86e9134e1d1c90a960dd57f59ce574d27b9a124	patch
https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html	mailing-list, third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.