8.8

CVE-2025-37777: linux Use After Free

CVSS: 8.8v3.1HighModified
AliasesUBUNTU-CVE-2025-37777DEBIAN-CVE-2025-37777
Published 01-05-2025Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2025-37777 is a high (CVSS 8.8) Use After Free vulnerability in linux. EPSS estimates a 0.37% chance of exploitation in the next 30 days, higher than 29.6% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.37%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 20 · Related 19
LSN-0122-1USN-7594-1USN-7594-2USN-7594-3USN-8028-1USN-8028-2

Timeline

  1. 01-05-2025
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free to ksmbd_conn_free. If ksmbd connection is referenced when ksmbd server thread terminates, It will not be freed, but conn->tcp_transport is freed. __smb2_lease_break_noti can be performed asynchronously when the connection is disconnected. __smb2_lease_break_noti calls ksmbd_conn_write, which can cause use-after-free when conn->ksmbd_transport is already freed.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.37%

Chance of exploitation in the next 30 days

Percentile

30%

Versus all other CVEs

30-day change

+0.02 pp

From 0.35% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.37%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu127 products
  • linuxAll versions (No fix recorded) | < 6.8.0-100.100
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1046.49
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 1da8bd9a10ecd718692732294d15fd801c0eabb5 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 1aec4d14cf81b7b3e7b69eb1cfa94144eed7138e | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < e59796fc80603bcd8569d4d2e10b213c1918edb4 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 21a4e47578d44c6b37c4fc4aba8ed7cc8dbb13de | 5.15
  • linux_kernel≥ 5.15, < 6.6.101 | ≥ 6.7, < 6.12.26 | ≥ 6.13, < 6.14.4 | 6.15:rc1 | 6.15:rc2
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.12.27-1

3 vendors · 130 products

References

27 links
Show all 27 references