CVE-2025-38728
BaseFortify
Publication date: 2025-09-04
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 6.1.153-1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a slab out-of-bounds error in the Linux kernel's SMB3 implementation when mounting to ksmbd. It occurs due to a missing check in the parse_server_interfaces() function, which can lead to reading memory outside the allocated slab, potentially causing system instability or crashes.
How can this vulnerability impact me? :
The vulnerability can cause a slab out-of-bounds memory access during the mount operation to ksmbd, which may lead to system crashes, instability, or potential exploitation by attackers to affect system reliability or security.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by enabling KASAN (Kernel Address Sanitizer) and monitoring for slab out of bounds errors related to smb3 mounts to ksmbd. Specifically, look for kernel logs indicating KASAN slab-out-of-bounds errors during mount operations involving cifs/smb3. Commands to check kernel logs include: 'dmesg | grep -i kasan' or 'journalctl -k | grep -i kasan'.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include updating the Linux kernel to a version where this vulnerability is fixed, as the issue is resolved in the kernel version referenced. If updating is not immediately possible, avoid mounting smb3 shares using ksmbd until the patch is applied. Additionally, enabling KASAN can help detect exploitation attempts.