CVE-2025-38561

🗓️ 19 Aug 2025 17:02:38Reported by LinuxType

Linux fix for Preauh_HashValue race in ksmbd; do not free at session setup; free with session.

Reporter	Title	Published	Views	Family All 142
GithubExploit	Exploit for CVE-2025-38561	8 Oct 202518:20	–	githubexploit
AstraLinux	Astra Linux - уязвимость в linux-6.1, linux-5.15	3 May 202623:59	–	astralinux
Circl	CVE-2025-38561	24 Sep 202503:00	–	circl
CNNVD	Linux kernel 安全漏洞	19 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-38561 ksmbd: fix Preauh_HashValue race condition	19 Aug 202517:02	–	cvelist
Debian	[SECURITY] [DLA 4328-1] linux-6.1 security update	13 Oct 202509:16	–	debian
Debian CVE	CVE-2025-38561	19 Aug 202517:02	–	debiancve
Tenable Nessus	Debian dla-4328 : linux-config-6.1 - security update	13 Oct 202500:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2025-5.0-0610	3 Sep 202500:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS / 25.04 : Linux kernel vulnerabilities (USN-7879-1)	24 Nov 202500:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange5.15–6.1.148

linux linux_kernelRange6.2–6.6.102

linux linux_kernelRange6.7–6.12.42

linux linux_kernelRange6.13–6.15.10

linux linux_kernelRange6.16–6.16.1

Node

debian debian_linuxMatch11.0

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/smb/server/smb2pdu.c"
    ],
    "versions": [
      {
        "version": "0626e6641f6b467447c81dd7678a69c66f7746cf",
        "lessThan": "fbf5c0845ed15122a770bca9be1d9b60b470d3aa",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0626e6641f6b467447c81dd7678a69c66f7746cf",
        "lessThan": "b69fd87076daa66f3d186bd421a7b0ee0cb45829",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0626e6641f6b467447c81dd7678a69c66f7746cf",
        "lessThan": "edeecc7871e8fc0878d53ce286c75040a0e38f6c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0626e6641f6b467447c81dd7678a69c66f7746cf",
        "lessThan": "7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fc",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0626e6641f6b467447c81dd7678a69c66f7746cf",
        "lessThan": "6613887da1d18dd2ecfd6c6148a873c4d903ebdc",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0626e6641f6b467447c81dd7678a69c66f7746cf",
        "lessThan": "44a3059c4c8cc635a1fb2afd692d0730ca1ba4b6",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/smb/server/smb2pdu.c"
    ],
    "versions": [
      {
        "version": "5.15",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.15",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.148",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.102",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.42",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.15.10",
        "lessThanOrEqual": "6.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.16.1",
        "lessThanOrEqual": "6.16.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.17",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/edeecc7871e8fc0878d53ce286c75040a0e38f6c
git	www.git.kernel.org/stable/c/6613887da1d18dd2ecfd6c6148a873c4d903ebdc
git	www.git.kernel.org/stable/c/44a3059c4c8cc635a1fb2afd692d0730ca1ba4b6
git	www.git.kernel.org/stable/c/b69fd87076daa66f3d186bd421a7b0ee0cb45829
git	www.git.kernel.org/stable/c/7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fc
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-25-916/
git	www.git.kernel.org/stable/c/fbf5c0845ed15122a770bca9be1d9b60b470d3aa
lists	www.lists.debian.org/debian-lts-announce/2025/10/msg00008.html

11 May 2026 21:30Current

7.2High risk

Vulners AI Score7.2

CVSS 3.14.7 - 8.5

EPSS0.00073

SSVC

CWE-362