Wind River Support Network

HomeDefectsLIN1023-14246
Acknowledged

LIN1023-14246 : Security Advisory - linux - CVE-2025-38437

Created: Jul 28, 2025    Updated: Jul 29, 2025
Found In Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]ksmbd: fix potential use-after-free in oplock/lease break ack[EOL][EOL]If ksmbd_iov_pin_rsp return error, use-after-free can happen by[EOL]accessing opinfo->state and opinfo_put and ksmbd_fd_put could[EOL]called twice.

CREATE(Triage):(User=admin) [CVE-2025-38437 (https://nvd.nist.gov/vuln/detail/CVE-2025-38437)
Live chat
Online