8.3

CVE-2025-22038: linux Out-of-bounds Read

CVSS: 8.3v3.1HighModified
AliasesUBUNTU-CVE-2025-22038DEBIAN-CVE-2025-22038
Published 16-04-2025Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2025-22038 is a high (CVSS 8.3) Out-of-bounds Read vulnerability in linux. EPSS estimates a 0.59% chance of exploitation in the next 30 days, higher than 47.1% of scored vulnerabilities.

Overall risk
33/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.3/10
010
High · v3.1 (CVE.org)
EPSS score
0.59%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 21 · Related 17
DLA-4193-1DSA-5907-1MGASA-2025-0142MGASA-2025-0146USN-7594-1USN-7594-2

Timeline

  1. 16-04-2025
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero num_subauth before sub_auth is accessed Access psid->sub_auth[psid->num_subauth - 1] without checking if num_subauth is non-zero leads to an out-of-bounds read. This patch adds a validation step to ensure num_subauth != 0 before sub_auth is accessed.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.59%

Chance of exploitation in the next 30 days

Percentile

47%

Versus all other CVEs

30-day change

+0.01 pp

From 0.58% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.59%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu126 products
  • linuxAll versions (No fix recorded) | < 6.8.0-86.87
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1041.43
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 3ac65de111c686c95316ade660f8ba7aea3cd3cc | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 0e36a3e080d6d8bd7a34e089345d043da4ac8283 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 56de7778a48560278c334077ace7b9ac4bfb2fd1 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 68c6c3142bfcdb049839d40a9a59ebe8ea865002 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < c8bfe1954a0b89e7b29b3a3e7f4c5e0ebd295e20 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < bf21e29d78cd2c2371023953d9c82dfef82ebb36 | 5.15
  • linux_kernel< 6.1.134 | ≥ 6.2, < 6.6.87 | ≥ 6.7, < 6.12.23 | ≥ 6.13, < 6.13.11 | ≥ 6.14, < 6.14.2
Debian1 product
  • linux< 6.1.135-1 | < 6.12.25-1

3 vendors · 129 products

References

28 links
Show all 28 references