CVE-2025-38561

Katalog CVE

CVSS 4.7 · Medium EPSS 0,43%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel, debian linux. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.

Rincian

Terbit di NVD

19 Agustus 2025

Terakhir diubah

30 Juli 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 35,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/44a3059c4c8cc635a1fb2afd692d0730ca1ba4b6 patch
• https://git.kernel.org/stable/c/6613887da1d18dd2ecfd6c6148a873c4d903ebdc patch
• https://git.kernel.org/stable/c/7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fc patch
• https://git.kernel.org/stable/c/b69fd87076daa66f3d186bd421a7b0ee0cb45829 patch
• https://git.kernel.org/stable/c/edeecc7871e8fc0878d53ce286c75040a0e38f6c patch
• https://git.kernel.org/stable/c/fbf5c0845ed15122a770bca9be1d9b60b470d3aa patch
• https://www.zerodayinitiative.com/advisories/ZDI-25-916/ advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html advisory pihak ketiga