CVE-2025-38325

ksmbd: add free_transport ops in ksmbd connection

MEDIUM
5.5
CVSS Score
Published: July 10, 2025 at 08:14 AM UTC
Updated: August 5, 2026 at 12:44 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.5%

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add free_transport ops in ksmbd connection free_transport function for tcp connection can be called from smbdirect. It will cause kernel oops. This patch add free_transport ops in ksmbd connection, and add each free_transports for tcp and smbdirect.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 6.14.46.12.26 ≤ v < 6.12.356.14.4 ≤ v < 6.156.15 ≤ v < 6.15.46.15 ≤ v < 6.166.15.1 ≤ v < 6.15.41aec4d14cf81b7b3e7b69eb1cfa94144eed7138e1da8bd9a10ecd718692732294d15fd801c0eabb521a4e47578d44c6b37c4fc4aba8ed7cc8dbb13de6.12.266.14.46.156.15 rc36.15 rc46.15 rc56.15 rc66.15 rc76.16 rc16.16 rc2e59796fc80603bcd8569d4d2e10b213c1918edb4
Vendor states this is fixed in 3890da762a66191c440b0bd6e3ee45501edbb0c1 (fixed)
Vendor states this is fixed in 3f3aae77280aad9f5acc6709c596148966f765c7 (fixed)
Vendor states this is fixed in 52f5a52dc17a4a7b4363ac03fe2c4ef26f020dc6 (fixed)
Vendor states this is fixed in a89f5fae998bdc4d0505306f93844c9ae059d50c (fixed)
Vendor states this is fixed in 6.12.35 (unaffected)
Vendor states this is fixed in 6.15 (unaffected)
Vendor states this is fixed in 6.15.4 (unaffected)
Vendor states this is fixed in 6.16 (unaffected)

References (4)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3890da762a66191c440b0bd6e3ee45501edbb0c1
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3f3aae77280aad9f5acc6709c596148966f765c7
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/52f5a52dc17a4a7b4363ac03fe2c4ef26f020dc6
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a89f5fae998bdc4d0505306f93844c9ae059d50c

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card