CVE-2025-22037
Published: Apr 16, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup even thought conn->preauth_info is not allocated. This patch add KSMBD_SESS_NEED_SETUP status of connection to ignore session setup request if smb2 negotiate phase is not complete.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 0626e6641f6b467447c81dd7678a69c66f7746cf - < cce57cd8c5dead24127cf2308fdd60fcad2d6ba6affected 0626e6641f6b467447c81dd7678a69c66f7746cf - < ca8bed31edf728a662ef9d6f39f50e7a7dc2b5adaffected 0626e6641f6b467447c81dd7678a69c66f7746cf - < 8f216b33a5e1b3489c073b1ea1b3d7cb63c8dc4daffected 0626e6641f6b467447c81dd7678a69c66f7746cf - < b8eb243e670ecf30e91524dd12f7260dac07d335affected 0626e6641f6b467447c81dd7678a69c66f7746cf - < c8b5b7c5da7d0c31c9b7190b4a7bba5281fc4780 |
Linux | Linux | affected 5.15unaffected 0 - < 5.15unaffected 6.6.107 - <= 6.6.*unaffected 6.12.23 - <= 6.12.*unaffected 6.13.11 - <= 6.13.*+2 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now