Review reviewHigh

CVE-2025-37776

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in smb_break_all_levII_oplock that can cause racy issues when unlocking in the middle of the loop. This patch use read lock to protect whole loop.

CVSS: 7
EPSS: 0.33%
CISA KEV: Not listed
Published: 2025.05.01

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.33%

Technical severityCVSS 7

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 296cb5457cc6f4a754c4ae29855f8a253d52bcc6, >= 0626e6641f6b467447c81dd7678a69c66f7746cf < d54ab1520d43e95f9b2e22d7a05fc9614192e5a5, >= 0626e6641f6b467447c81dd7678a69c66f7746cf < d73686367ad68534257cd88a36ca3c52cb8b81d8, >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 18b4fac5ef17f77fed9417d22210ceafd6525fc7, >= 5.15, >= 5.15 < 6.6.88, >= 6.7 < 6.12.25, >= 6.13 < 6.14.4, 6.15
Fixed versions: 6.6.88, 6.12.25, 6.14.4

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-416