CVE-2025-38527

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/08/2025
Last modified:
18/08/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> smb: client: fix use-after-free in cifs_oplock_break<br /> <br /> A race condition can occur in cifs_oplock_break() leading to a<br /> use-after-free of the cinode structure when unmounting:<br /> <br /> cifs_oplock_break()<br /> _cifsFileInfo_put(cfile)<br /> cifsFileInfo_put_final()<br /> cifs_sb_deactive()<br /> [last ref, start releasing sb]<br /> kill_sb()<br /> kill_anon_super()<br /> generic_shutdown_super()<br /> evict_inodes()<br /> dispose_list()<br /> evict()<br /> destroy_inode()<br /> call_rcu(&amp;inode-&gt;i_rcu, i_callback)<br /> spin_lock(&amp;cinode-&gt;open_file_lock) open_file_lock)

Impact