In the Linux kernel, the following vulnerability has been resolved:
ksmbd: add free_transport ops in ksmbd connection
freetransport function for tcp connection can be called from smbdirect. It will cause kernel oops. This patch add freetransport ops in ksmbd connection, and add each free_transports for tcp and smbdirect.
[
{
"target": {
"file": "fs/smb/server/transport_tcp.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"339859953421581233728110830185951643654",
"42216723957993140289571416758258914255",
"272538345436260570236111914585676768324",
"73410468816089927868497431246945146954",
"177824804126080367068793359880764014351",
"258322533576490227975065776299712295702"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f3aae77280aad9f5acc6709c596148966f765c7",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-38325-22daff47"
},
{
"target": {
"function": "ksmbd_free_transport",
"file": "fs/smb/server/transport_tcp.c"
},
"signature_version": "v1",
"digest": {
"length": 143.0,
"function_hash": "203838199667559333612348896566417274825"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a89f5fae998bdc4d0505306f93844c9ae059d50c",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2025-38325-2948d898"
},
{
"target": {
"file": "fs/smb/server/connection.h"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"323383670278817445749098000838894255900",
"115296316621410917382760233060158247192",
"87471166449441929447820200206487859836",
"157507557608227275841242720826310085306"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a89f5fae998bdc4d0505306f93844c9ae059d50c",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-38325-3498b61c"
},
{
"target": {
"function": "ksmbd_free_transport",
"file": "fs/smb/server/transport_tcp.c"
},
"signature_version": "v1",
"digest": {
"length": 143.0,
"function_hash": "203838199667559333612348896566417274825"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f3aae77280aad9f5acc6709c596148966f765c7",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2025-38325-38915180"
},
{
"target": {
"file": "fs/smb/server/transport_tcp.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"339859953421581233728110830185951643654",
"42216723957993140289571416758258914255",
"272538345436260570236111914585676768324",
"73410468816089927868497431246945146954",
"177824804126080367068793359880764014351",
"258322533576490227975065776299712295702"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a89f5fae998bdc4d0505306f93844c9ae059d50c",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-38325-428e3d99"
},
{
"target": {
"file": "fs/smb/server/transport_rdma.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"316189347057007352918988251955683867482",
"150394020193823172613640287743938160974",
"288048458528466218522576011308374331461",
"66375076237853796183165759950724335430",
"91893991610124012758356455321163950896",
"91568858244169031479917634228887924871",
"241525723468916968558664570493928333727",
"42716082317291405842099819683623739565",
"156840614918328575695500103613400893965",
"78986073501841696457683214110940381732",
"181869467503446666497345895552533452524",
"277657177028664364325951010731298912141"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f3aae77280aad9f5acc6709c596148966f765c7",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-38325-576b51dc"
},
{
"target": {
"function": "free_transport",
"file": "fs/smb/server/transport_rdma.c"
},
"signature_version": "v1",
"digest": {
"length": 1182.0,
"function_hash": "326387991365308952672903192665387477701"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f3aae77280aad9f5acc6709c596148966f765c7",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2025-38325-5928d304"
},
{
"target": {
"file": "fs/smb/server/connection.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"88445180273439299012769333799440058365",
"204459533252208510498402252337344603143",
"242804298784797994959750523150324708257",
"30724619255724339504407940450803554935"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f3aae77280aad9f5acc6709c596148966f765c7",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-38325-b8961064"
},
{
"target": {
"file": "fs/smb/server/transport_rdma.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"316189347057007352918988251955683867482",
"150394020193823172613640287743938160974",
"288048458528466218522576011308374331461",
"66375076237853796183165759950724335430",
"91893991610124012758356455321163950896",
"91568858244169031479917634228887924871",
"241525723468916968558664570493928333727",
"42716082317291405842099819683623739565",
"156840614918328575695500103613400893965",
"78986073501841696457683214110940381732",
"181869467503446666497345895552533452524",
"277657177028664364325951010731298912141"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a89f5fae998bdc4d0505306f93844c9ae059d50c",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-38325-c6b3e7fd"
},
{
"target": {
"file": "fs/smb/server/connection.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"88445180273439299012769333799440058365",
"204459533252208510498402252337344603143",
"242804298784797994959750523150324708257",
"30724619255724339504407940450803554935"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a89f5fae998bdc4d0505306f93844c9ae059d50c",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-38325-e2ae650e"
},
{
"target": {
"file": "fs/smb/server/connection.h"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"323383670278817445749098000838894255900",
"115296316621410917382760233060158247192",
"87471166449441929447820200206487859836",
"157507557608227275841242720826310085306"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f3aae77280aad9f5acc6709c596148966f765c7",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-38325-e458cf55"
},
{
"target": {
"function": "free_transport",
"file": "fs/smb/server/transport_rdma.c"
},
"signature_version": "v1",
"digest": {
"length": 1182.0,
"function_hash": "326387991365308952672903192665387477701"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a89f5fae998bdc4d0505306f93844c9ae059d50c",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2025-38325-e4ec1251"
},
{
"target": {
"function": "ksmbd_conn_free",
"file": "fs/smb/server/connection.c"
},
"signature_version": "v1",
"digest": {
"length": 342.0,
"function_hash": "306666032699516546801144089037027100444"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f3aae77280aad9f5acc6709c596148966f765c7",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2025-38325-f6b8f207"
},
{
"target": {
"function": "ksmbd_conn_free",
"file": "fs/smb/server/connection.c"
},
"signature_version": "v1",
"digest": {
"length": 342.0,
"function_hash": "306666032699516546801144089037027100444"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a89f5fae998bdc4d0505306f93844c9ae059d50c",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2025-38325-f81bbc3c"
}
]