CVE-2025-37750
A critical use‑after‑free bug was found in the Linux kernel’s SMB client, allowing an attacker to crash the system or potentially execute code. The flaw occurs when multiple SMB channels reuse a cryptographic context, leading to a memory corruption error. The issue has been fixed in recent kernel releases.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel 6.15 and earlier versions that do not include the fix, especially systems using SMB client multichannel support.
Real-world impact
An attacker could crash the kernel or potentially run arbitrary code on the affected system, leading to denial of service or full compromise.
Why this severity
The CVSS score of 9.8 reflects the lack of authentication or user interaction required, the high impact on confidentiality, integrity, and availability, and the use‑after‑free vulnerability that can lead to arbitrary code execution.
What to do about it
- 01Upgrade your Linux kernel to a version that includes the fix (e.g., 6.15.0-rc1 or later).
- 02Reboot the system to load the new kernel.
NVD description indicates the vulnerability has been resolved in the Linux kernel.
Timeline
- May 1, 2025 · May 1, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Jul 30, 2026 · 7d agoAdvisory updatedThe NVD record was last revised.
- Jul 30, 2026 · 6d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.