CVE-2025-22038
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Apr 16, 2025
Updated: Apr 29, 2025
CWE ID 125
Summary
CVE-2025-22038 is a vulnerability affecting the Linux kernel that has been addressed. The issue lies in the ksmbd component where there is a failure to verify the number of subauthorizations (num_subauth) before accessing sub_auth. This can result in an out-of-bounds read if num_subauth is zero. To mitigate this issue, a new validation step has been added to ensure num_subauth is non-zero before sub_auth is accessed.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.