CVE-2025-38561

🗓️ 19 Aug 2025 17:15:32Reported by [email protected]Type

CVE-2025-38561: Linux ksmbd Preauh_HashValue race fixed; free at session termination, not at setup.

Reporter	Title	Published	Views	Family All 109
GithubExploit	Exploit for CVE-2025-38561	8 Oct 202518:20	–	githubexploit
AstraLinux	Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12	1 Nov 202510:54	–	astralinux
BDU FSTEC	SMB Server Heap Buffer Overflow DoS	5 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-38561	24 Sep 202503:00	–	circl
CNNVD	Linux Kernel Security Vulnerabilities	19 Aug 202500:00	–	cnnvd
CVE	CVE-2025-38561	19 Aug 202517:02	–	cve
Cvelist	CVE-2025-38561 ksmbd: fix Preauh_HashValue race condition	19 Aug 202517:02	–	cvelist
Debian	[SECURITY] [DLA 4328-1] linux-6.1 security update	13 Oct 202509:16	–	debian
Debian CVE	CVE-2025-38561	19 Aug 202517:02	–	debiancve
Tenable Nessus	Debian dla-4328 : linux-config-6.1 - security update	13 Oct 202500:00	–	nessus

NVD

Node

linux linux_kernelRange5.15–6.1.148

linux linux_kernelRange6.2–6.6.102

linux linux_kernelRange6.7–6.12.42

linux linux_kernelRange6.13–6.15.10

linux linux_kernelRange6.16–6.16.1

Node

Source	Link
git	www.git.kernel.org/stable/c/b69fd87076daa66f3d186bd421a7b0ee0cb45829
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-25-916/
git	www.git.kernel.org/stable/c/44a3059c4c8cc635a1fb2afd692d0730ca1ba4b6
git	www.git.kernel.org/stable/c/7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fc
lists	www.lists.debian.org/debian-lts-announce/2025/10/msg00008.html
git	www.git.kernel.org/stable/c/edeecc7871e8fc0878d53ce286c75040a0e38f6c
git	www.git.kernel.org/stable/c/6613887da1d18dd2ecfd6c6148a873c4d903ebdc
git	www.git.kernel.org/stable/c/fbf5c0845ed15122a770bca9be1d9b60b470d3aa

30 Jul 2026 06:23Current

CVSS 3.14.7 - 9.8

EPSS0.0045

SSVC