CVE-2025-38561
Description
From CVE.org
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.
Statement
This vulnerability does not impact Red Hat Enterprise Linux as the in-kernel SMB server (ksmbd) is not built or supported in Red Hat kernels. The upstream flaw involves a race condition during concurrent SMB session negotiations that can lead to unexpected memory release and denial of service. Because Red Hat relies on userspace Samba packages for SMB file-sharing services, supported systems lack the affected kernel subsystem and are not exposed.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
