← Database

CVE-2025-38437

HIGH CVSS: 8.8 Published: 2025-07-25 Modified: 2026-07-30

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbd_iov_pin_rsp return error, use-after-free can happen by accessing opinfo->state and opinfo_put and ksmbd_fd_put could called twice.

Affected Platforms

Linux Linux KernelDebian Debian Linux

Weakness Type

CWE-416

References