2367536 – (CVE-2025-37924) CVE-2025-37924 kernel: ksmbd: fix use-after-free in kerberos authentication

Bug 2367536 (CVE-2025-37924) - CVE-2025-37924 kernel: ksmbd: fix use-after-free in kerberos authentication

Summary: CVE-2025-37924 kernel: ksmbd: fix use-after-free in kerberos authentication

Keywords:
Status:	NEW
Alias:	CVE-2025-37924
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	unspecified
Severity:	unspecified
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2025-05-20 16:02 UTC by OSIDB Bzimport
Modified:	2026-06-29 20:32 UTC (History)
CC List:	6 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description OSIDB Bzimport 2025-05-20 16:02:53 UTC

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in kerberos authentication

Setting sess->user = NULL was introduced to fix the dangling pointer
created by ksmbd_free_user. However, it is possible another thread could
be operating on the session and make use of sess->user after it has been
passed to ksmbd_free_user but before sess->user is set to NULL.

Comment 1 Jon Moroney 2025-05-20 23:46:30 UTC Comment hidden (spam)

This comment was flagged as spam, view the edit history to see the original text if required.

Note You need to log in before you can comment on or make changes to this bug.