CVE-2025-37952ksmbd: Fix UAF in __close_file_table_ids
- 8.8HighCVSS base score
- 0.37%Exploitation in 30 daysEPSS · top 68% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible if one thread destroys the file via __ksmbd_close_fd while another thread holds a reference to it. The existing checks on fp->refcount are not sufficient to prevent this. The fix takes ft->lock around the section which removes the file from the file table. This prevents two threads acquiring the same file pointer via __close_file_table_ids, as well as the other functions which retrieve a file from the IDR and which already use this same lock.
Timeline
ID reserved
By Linux
- 34 days later
· 34 days later
Published
- 18 months later
· 18 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.37% · top 68% of all CVEs (15 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.
Affected products
- affected 0626e6641f6b467447c81dd7678a69c66f7746cf – < 21100812657965dd95bc305f6076f62012f34cf4
- affected 0626e6641f6b467447c81dd7678a69c66f7746cf – < fec1f9e9a650e8e7011330a085c77e7bf2a08ea9
- affected 0626e6641f6b467447c81dd7678a69c66f7746cf – < 9e9841e232b51171ddf3bc4ee517d5d28dc8cad6
- affected 0626e6641f6b467447c81dd7678a69c66f7746cf – < 16727e442568a46d9cca69fe2595896de86e120d
- affected 0626e6641f6b467447c81dd7678a69c66f7746cf – < 36991c1ccde2d5a521577c448ffe07fcccfe104d
- affected 5.15
- unaffected < 5.15
- unaffected 6.1.191 – ≤ 6.1.*
- unaffected 6.6.91 – ≤ 6.6.*
- unaffected 6.12.29 – ≤ 6.12.*
- unaffected 6.14.7 – ≤ 6.14.*
- unaffected 6.15 – ≤ *
References
References5
- https://git.kernel.org/stable/c/21100812657965dd95bc305f6076f62012f34cf4 (opens in a new tab)
- https://git.kernel.org/stable/c/fec1f9e9a650e8e7011330a085c77e7bf2a08ea9 (opens in a new tab)
- https://git.kernel.org/stable/c/9e9841e232b51171ddf3bc4ee517d5d28dc8cad6 (opens in a new tab)
- https://git.kernel.org/stable/c/16727e442568a46d9cca69fe2595896de86e120d (opens in a new tab)
- https://git.kernel.org/stable/c/36991c1ccde2d5a521577c448ffe07fcccfe104d (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-15906 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-37952)Record last updated .