Skip to content
OpenAdvisories

Archive

20 May 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-37947 Public exploit

    ksmbd: prevent out-of-bounds stream writes by validating *pos

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfs_stream_write() did not validate whether the write offset (*pos) was within the bounds of the existing stream data lengt…

  • High 8.8
    CVE-2025-37899 Public exploit

    ksmbd: fix use-after-free in session logoff

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the …