Wind River Support Network

HomeDefectsLIN1024-8603

Fixed

LIN1024-8603 : Security Advisory - linux - CVE-2025-22037

Created: Apr 16, 2025 Updated: Oct 21, 2025

Resolved Date: Oct 9, 2025

Found In Version: 10.24.33.1

Fix Version: 10.24.33.13

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix null pointer dereference in alloc_preauth_hash()

The Client send malformed smb2 negotiate request. ksmbd return error
response. Subsequently, the client can send smb2 session setup even
thought conn->preauth_info is not allocated.
This patch add KSMBD_SESS_NEED_SETUP status of connection to ignore
session setup request if smb2 negotiate phase is not complete.

CVEs

CVE-2025-22037