Critical· 9.8official fix available
CVE-2025-39932
A bug in the Linux kernel’s SMB client caused a race condition that could crash the system. The issue was fixed by disabling pending work during SMB client destruction. The fix is now included in recent kernel releases.
publishedOct 4, 2025
last modifiedJul 30, 2026
sourcesNVD
severity · cvss
9.8
critical · how bad it is
exploitation · epss
<1%
19th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Aug 29, 2026
An official fix is available, so this entry is kept for 30 days and then removed automatically.
01
Who is affected
Linux kernel, particularly version 6.17 and later.
02
Real-world impact
An attacker could trigger the race condition to crash the kernel, leading to a denial‑of‑service or potentially allowing further exploitation if the crash is leveraged.
03
Why this severity
The CVSS score of 9.8 reflects that the flaw can be triggered remotely, requires no user interaction, and can completely compromise confidentiality, integrity, and availability.
04
What to do about it
official fix available
recommended steps
- 01Update the Linux kernel to a version that includes the fix (e.g., 6.17 or later).
- 02Reboot the system to load the updated kernel.
NVD-referenced vendor advisory
05
Timeline
- Oct 4, 2025 · Oct 4, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Jul 30, 2026 · 6d agoAdvisory updatedThe NVD record was last revised.
- Jul 30, 2026 · 6d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
06
How it’s attacked
Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeUnchanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
07
References & advisories
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →