CVE-2025-37899

This repository contains a README linking to a blog post detailing the discovery of CVE-2025-37899, a remote zero-day vulnerability in the Linux kernel’s SMB implementation. No exploit code or technical PoC is provided in the repository itself.

This repository documents the analysis of CVE-2024-37032, a path traversal vulnerability in Ollama's SMB implementation, using LLM-based techniques to identify and exploit the flaw. It includes detailed explanations of the vulnerability, attack scenarios, and multi-level testing methodologies.

This repository contains a detailed writeup describing a use-after-free vulnerability (CVE-2025-37899) in the Linux kernel's ksmbd module, which handles SMB protocol. The vulnerability arises from improper synchronization in the `smb2_session_logoff` function, potentially leading to remote code execution with kernel privileges.