High severity7.0NVD Advisory· Published May 1, 2025· Updated Jun 17, 2026

CVE-2025-37776

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in smb_break_all_levII_oplock()

There is a room in smb_break_all_levII_oplock that can cause racy issues when unlocking in the middle of the loop. This patch use read lock to protect whole loop.

Affected products

Linux/Kernelllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 5.15
osv-coords
pkg:linux/kernel
Range: >= 5.15.0, < 6.6.88

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/18b4fac5ef17f77fed9417d22210ceafd6525fc7nvdPatch
git.kernel.org/stable/c/296cb5457cc6f4a754c4ae29855f8a253d52bcc6nvdPatch
git.kernel.org/stable/c/d54ab1520d43e95f9b2e22d7a05fc9614192e5a5nvdPatch
git.kernel.org/stable/c/d73686367ad68534257cd88a36ca3c52cb8b81d8nvdPatch

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000