Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- SMB network file system;
(CVE-2025-22037, CVE-2025-37899)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gcp-6.8 | 6.8.0-1048.51~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-oracle-6.8 | 6.8.0-1044.45~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-gcp | 6.8.0-1048.51 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-gke | 6.8.0-1044.49 |
Vulnerabilities 2
-
High 8.8CVE-2025-37899 Public exploit
ksmbd: fix use-after-free in session logoff
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the …
-
High 7.5CVE-2025-22037 EPSS 69%
ksmbd: fix null pointer dereference in alloc_preauth_hash()
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup…