CVE-2025-37899
HIGH EXPLOITEDLinux Kernel 5.15-6.12.28, 6.1.0-6.1.159, 6.2.0-6.6.119, 6.7.0-6.12.28, 6.13.0-6.14.6 - Use-After-Free in Session Logoff
Title source: llmExploitation Summary
CVE-2025-37899 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including SeanHeelan, ccss17, vett3x.
AI-analyzed exploit summary This repository contains a README linking to a blog post detailing the discovery of CVE-2025-37899, a remote zero-day vulnerability in the Linux kernel’s SMB implementation. No exploit code or technical PoC is provided in the repository itself.
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd. The handler for that connection could be in the smb2_sess_setup function which makes use of sess->user.
Exploits (3)
This repository contains a README linking to a blog post detailing the discovery of CVE-2025-37899, a remote zero-day vulnerability in the Linux kernel’s SMB implementation. No exploit code or technical PoC is provided in the repository itself.
This repository documents the analysis of CVE-2024-37032, a path traversal vulnerability in Ollama's SMB implementation, using LLM-based techniques to identify and exploit the flaw. It includes detailed explanations of the vulnerability, attack scenarios, and multi-level testing methodologies.
This repository contains a detailed writeup describing a use-after-free vulnerability (CVE-2025-37899) in the Linux kernel's ksmbd module, which handles SMB protocol. The vulnerability arises from improper synchronization in the `smb2_session_logoff` function, potentially leading to remote code execution with kernel privileges.
References (7)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H