Skip to content
OpenAdvisories
High USN-8059-2 2 CVEs

linux-raspi-realtime vulnerabilities

Published Feb 24, 2026 · Updated Oct 27, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- SMB network file system;
(CVE-2025-22037, CVE-2025-37899)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro Realtime 24.04 LTS Pro:Realtime:24.04:LTS linux-raspi-realtime 6.8.0-2038.39

Vulnerabilities 2

  • High 8.8
    CVE-2025-37899 Public exploit

    ksmbd: fix use-after-free in session logoff

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2025-22037 EPSS 69%

    ksmbd: fix null pointer dereference in alloc_preauth_hash()

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2025-22037
  • report
    https://ubuntu.com/security/CVE-2025-37899