CVE-2025-38561
MEDIUMLinux Kernel 5.15-6.1.147 6.2-6.6.101 6.7-6.12.41 6.13-6.15.9 6.16 - Race Condition in ksmbd Session Setup
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-38561. PoCs published by toshithh.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2025-38561, a race condition in ksmbd's Preauh_HashValue handling. The exploit sends multiple SMB session setup requests in parallel to trigger the race condition, potentially causing a denial of service or other unintended behavior.
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.
Exploits (1)
This repository contains a functional exploit for CVE-2025-38561, a race condition in ksmbd's Preauh_HashValue handling. The exploit sends multiple SMB session setup requests in parallel to trigger the race condition, potentially causing a denial of service or other unintended behavior.
References (8)
Scores
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H