CVE-2025-38191
published 2025-07-04CVE-2025-38191: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in destroy_previous_session If client set…
medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix null pointer dereference in destroy_previous_session
If client set ->PreviousSessionId on kerberos session setup stage,
NULL pointer dereference error will happen. Since sess->user is not
set yet, It can pass the user argument as NULL to destroy_previous_session.
sess->user will be set in ksmbd_krb5_authenticate(). So this patch move
calling destroy_previous_session() after ksmbd_krb5_authenticate().
Affected
30 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 6.1.147-1 (bookworm) | linux 6.1.147-1 (bookworm) |
| debian | linux-6.1 | < linux 6.1.147-1 (bookworm) | linux 6.1.147-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 281afc52e2961cd5dd8326ebc9c5bc40904c0468 | 281afc52e2961cd5dd8326ebc9c5bc40904c0468 |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 0902625a24eea7fdc187faa5d97df244d159dd6e | 0902625a24eea7fdc187faa5d97df244d159dd6e |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 1193486dffb7432a09f57f5d09049b4d4123538b | 1193486dffb7432a09f57f5d09049b4d4123538b |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 076f1adefb9837977af7ed233883842ddc446644 | 076f1adefb9837977af7ed233883842ddc446644 |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 7ac5b66acafcc9292fb935d7e03790f2b8b2dc0e | 7ac5b66acafcc9292fb935d7e03790f2b8b2dc0e |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.1.147-1 | 6.1.147-1 |
| linux | linux_kernel | >= 0 < 6.12.35-1 | 6.12.35-1 |
| linux | linux_kernel | >= 0 < 6.12.35-1 | 6.12.35-1 |
| linux | linux_kernel | >= 0 < 6.8.0-100.100 | 6.8.0-100.100 |
| linux | linux_kernel | >= 5.15 < 6.1.142 | 6.1.142 |
| linux | linux_kernel | >= 6.13 < 6.15.4 | 6.15.4 |
| linux | linux_kernel | >= 6.2 < 6.6.95 | 6.6.95 |
| linux | linux_kernel | >= 6.7 < 6.12.35 | 6.12.35 |
| msrc | azl3_kernel_6.6.92.2-2_on_azure_linux_3.0 | — | — |
| msrc | azl3_mozjs_102.15.1-1_on_azure_linux_3.0 | — | — |
| msrc | cbl2_kernel_5.15.186.1-1_on_cbl_mariner_2.0 | — | — |
| ubuntu | linux-aws | — | — |
| ubuntu | linux-aws-6.8 | — | — |
| ubuntu | linux-gkeop | — | — |
| ubuntu | linux-nvidia | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.6MEDIUM