CVE-2025-38501 — Uncontrolled Resource Consumption in Linux
Severity
7.5HIGHNVD
EPSS
0.0%
top 85.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 16
Latest updateMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: limit repeated connections from clients with the same IP
Repeated connections from clients with the same IP address may exhaust
the max connections and prevent other normal client connections.
This patch limit repeated connections from clients with the same IP.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages3 packages
▶CVEListV5linux/linux0626e6641f6b467447c81dd7678a69c66f7746cf — cb092fc3a62972a4aa47c9fe356c2c6a01cd840b+6
Also affects: Debian Linux 11.0
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-54w6-m43p-jffg: In the Linux kernel, the following vulnerability has been resolved:
ksmbd: limit repeated connections from clients with the same IP
Repeated connect↗2025-08-16
OSV▶
CVE-2025-38501: In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit repeated connections from clients with the same IP Repeated connectio↗2025-08-16