VYPR
← All advisories
High severity8.3NVD Advisory· Published Apr 16, 2025· Updated Jul 30, 2026

CVE-2025-22038

CVE-2025-22038

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate zero num_subauth before sub_auth is accessed

Access psid->sub_auth[psid->num_subauth - 1] without checking if num_subauth is non-zero leads to an out-of-bounds read. This patch adds a validation step to ensure num_subauth != 0 before sub_auth is accessed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Linux/Kernel3 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <6.1.134
    • (no CPE)
    • (no CPE)range: 5.15
  • osv-coords
    pkg:linux/kernel
    Range: >= 5.15.0, < 6.1.134

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.