Critical· 9.8official fix available
CVE-2025-37778
A critical flaw in the Linux kernel's SMB server can cause a program to crash or potentially allow an attacker to execute arbitrary code. The bug involves a dangling pointer that can be triggered during Kerberos authentication. It has been fixed in recent kernel releases.
publishedMay 1, 2025
last modifiedAug 4, 2026
sourcesNVD
severity · cvss
9.8
critical · how bad it is
exploitation · epss
<1%
40th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Sep 3, 2026
An official fix is available, so this entry is kept for 30 days and then removed automatically.
01
Who is affected
Linux kernel 6.15 and earlier, including Debian 11.0.
02
Real-world impact
An attacker could crash the system or take full control of it, allowing them to do anything the computer can do.
03
Why this severity
The CVSS score is high because the flaw can be exploited remotely without authentication and can lead to complete compromise of confidentiality, integrity, and availability.
04
What to do about it
official fix available
recommended steps
- 01Upgrade the Linux kernel to a version that includes the fix (e.g., 6.15 or later).
NVD description
05
Timeline
- May 1, 2025 · May 1, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 1d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
06
How it’s attacked
Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeUnchanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
07
References & advisories
- git.kernel.org/stable/c/1db2451de23e98bc86…patch
- git.kernel.org/stable/c/1e440d5b25b7efccb3…patch
- git.kernel.org/stable/c/6e30c0e10210c714f3…patch
- git.kernel.org/stable/c/b61f04d5d73c53d183…
- git.kernel.org/stable/c/d5b554bc8d554ed6dd…patch
- git.kernel.org/stable/c/e83e39a5f6a01a8141…patch
- lists.debian.org/debian-lts-announce/2025/05…mailing listthird party advisory
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →