CVE-2025-37899: ksmbd: fix use-after-free in session logoff
- Is it exploited?
Reported, not confirmed by CISA. VulnCheck KEV lists it as exploited in the wild. CISA has not added it to its Known Exploited Vulnerabilities catalog as of .
VulnCheck KEV lists it since . It cites 1 public report, the first from .
- How likely is exploitation in the next 30 days?
- 0.9%
EPSS score, percentile 59.1 of all scored records. A probability estimated by FIRST, not a report of exploitation.
- How severe?
- 8.8 High
CVSS v3.1 base score, given by the CNA
- What should I do?
CISA has set no required action, because the vulnerability is not in KEV.
The CVE record links no vendor advisory, patch or mitigation.
- Which versions are affected?
Affected
- 5.15
Unaffected before 5.15; 6.1.159; 6.6.119; 6.12.28; 6.14.6; 6.15
Source: CISA KEV 2026.10.29, as of ; VulnCheck KEV, as of ; FIRST EPSS, as of ; CVE List, as of . About the data.
Description
ksmbd: fix use-after-free in session logoff
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd. The handler for that connection could be in the smb2_sess_setup function which makes use of sess->user.
Source: CVE List, as of . About the data.
What to do
Advisories and patches
The CVE record links no vendor advisory, patch or mitigation.
This summary is based on the CVE record as of . Check the vendor's advisory before you act: affected versions and fixes can change.
Affected products and versions
Versions by product, as listed in the CVE record (2 products)
| Status | Versions |
|---|---|
| Affected | from 0626e6641f6b to before 931dc8a3670f |
| Affected | from 0626e6641f6b to before 70ad6455139e |
| Affected | from 0626e6641f6b to before d5ec1d79509b |
| Affected | from 0626e6641f6b to before 02d16046cd11 |
| Affected | from 0626e6641f6b to before 2fc9feff45d9 |
Versions not listed are: unaffected.
| Status | Versions |
|---|---|
| Affected | 5.15 |
| Unaffected | before 5.15 |
| Unaffected | 6.1.159 |
| Unaffected | 6.6.119 |
| Unaffected | 6.12.28 |
| Unaffected | 6.14.6 |
| Unaffected | 6.15 |
Versions not listed are: affected.
Versions the record lists as unaffected: 6.1.159, 6.6.119, 6.12.28, 6.14.6, 6.15.
Source: CVE List, as of . About the data.
Timeline
| Date | Event |
|---|---|
| CVE record published | |
| CVE record last updated |
Known exploited Linux vulnerabilities
- CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability
- CVE-2025-39682: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
- CVE-2025-39964: Linux Kernel Race Condition Vulnerability
- CVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability
- CVE-2026-53362: Linux Kernel Unspecified Vulnerability