Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- SMB network file system;
(CVE-2025-22037, CVE-2025-37899)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | linux-hwe-6.8 | 6.8.0-101.101~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-101.101.1~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux | 6.8.0-101.101 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-gkeop | 6.8.0-1031.34 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-lowlatency | 6.8.0-101.101.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-oracle | 6.8.0-1044.45 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-raspi | 6.8.0-1048.52 |
Vulnerabilities 2
-
High 8.8CVE-2025-37899 Public exploit
ksmbd: fix use-after-free in session logoff
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the …
-
High 7.5CVE-2025-22037 EPSS 69%
ksmbd: fix null pointer dereference in alloc_preauth_hash()
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup…