In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in smbbreakalllevIIoplock()
There is a room in smbbreakalllevIIoplock that can cause racy issues when unlocking in the middle of the loop. This patch use read lock to protect whole loop.
[
{
"id": "CVE-2025-37776-04ba7516",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"117671848137904309320997502785706790434",
"186106712060841522764536415960450722519",
"233675492959872792509719614849468010222",
"297673161369913975097803029857782507399",
"110441361941650031678690700450535543295",
"136457139137785106457473420379654451212",
"268645713191105229894573403990433545242",
"132506784893857705595800856427642080229",
"131615338604232667498034023241499157969",
"66974475008748621417939422659040026364",
"266083526495596877415680079660203604659",
"206105603016234329674771549981044455611",
"218412539854317273734300868510760990970",
"87890778038714230577882705194503091899",
"104671152720333208673394192451740692100",
"193543979868282414398223563947204194787",
"308386548896110577994214483387371268234",
"25577503787359182439277465802690700176",
"119741868650310575500840347233095124105",
"282169517262758852602757771330541777093",
"332671130016239272602943614725800331885",
"71590583638440139817398598359926044152",
"128385609344393349724480768596911616570",
"187799193499640835279581686227800870246",
"148121351268844993202566882415712255299",
"274489509873385568416171292081360395576",
"243606130916043780320526661953954100792",
"118632118166418200487221195673827736163",
"178564977392501084070056455737775883626",
"151479714084987152991466074958456174717",
"273617338194401591172159041699306628186",
"278665599836038218723980321847334347638",
"222598676153969684507619196821552198687",
"138804354969509034261560082843466203413",
"93158135081989395046701149811315239165",
"215796193471261580266049063601683838072",
"325008861173564095953022254000039904913",
"19228545219528904356623241521725804382",
"302100158157814757549818642416212024500",
"45691322219145227411568307989539991534",
"146589336017588846434727884419945777109",
"174444998144001106458097211087674497247",
"64127837912467803687984016240133635567",
"187144496363734170926032168253694129303",
"299307415711493519279768948541679865807"
],
"threshold": 0.9
},
"target": {
"file": "fs/smb/server/oplock.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18b4fac5ef17f77fed9417d22210ceafd6525fc7"
},
{
"id": "CVE-2025-37776-06bbebe8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"117671848137904309320997502785706790434",
"186106712060841522764536415960450722519",
"233675492959872792509719614849468010222",
"297673161369913975097803029857782507399",
"110441361941650031678690700450535543295",
"136457139137785106457473420379654451212",
"268645713191105229894573403990433545242",
"132506784893857705595800856427642080229",
"131615338604232667498034023241499157969",
"66974475008748621417939422659040026364",
"266083526495596877415680079660203604659",
"206105603016234329674771549981044455611",
"218412539854317273734300868510760990970",
"87890778038714230577882705194503091899",
"104671152720333208673394192451740692100",
"193543979868282414398223563947204194787",
"308386548896110577994214483387371268234",
"25577503787359182439277465802690700176",
"119741868650310575500840347233095124105",
"282169517262758852602757771330541777093",
"332671130016239272602943614725800331885",
"71590583638440139817398598359926044152",
"128385609344393349724480768596911616570",
"187799193499640835279581686227800870246",
"148121351268844993202566882415712255299",
"274489509873385568416171292081360395576",
"243606130916043780320526661953954100792",
"118632118166418200487221195673827736163",
"178564977392501084070056455737775883626",
"151479714084987152991466074958456174717",
"273617338194401591172159041699306628186",
"278665599836038218723980321847334347638",
"222598676153969684507619196821552198687",
"138804354969509034261560082843466203413",
"93158135081989395046701149811315239165",
"215796193471261580266049063601683838072",
"325008861173564095953022254000039904913",
"19228545219528904356623241521725804382",
"302100158157814757549818642416212024500",
"45691322219145227411568307989539991534",
"146589336017588846434727884419945777109",
"174444998144001106458097211087674497247",
"64127837912467803687984016240133635567",
"187144496363734170926032168253694129303",
"299307415711493519279768948541679865807"
],
"threshold": 0.9
},
"target": {
"file": "fs/smb/server/oplock.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@296cb5457cc6f4a754c4ae29855f8a253d52bcc6"
},
{
"id": "CVE-2025-37776-0dd03adf",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "33753689916102568803161655175276110938",
"length": 164.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_put"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d73686367ad68534257cd88a36ca3c52cb8b81d8"
},
{
"id": "CVE-2025-37776-0e2d1915",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "115541310942672728264567918887145884189",
"length": 130.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_free_rcu"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d54ab1520d43e95f9b2e22d7a05fc9614192e5a5"
},
{
"id": "CVE-2025-37776-2fc54824",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "257490003828435217013114758971581019951",
"length": 1386.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "smb_break_all_levII_oplock"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@296cb5457cc6f4a754c4ae29855f8a253d52bcc6"
},
{
"id": "CVE-2025-37776-3d8988f7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "61708943939737378568722809850098659527",
"length": 414.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_get_list"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18b4fac5ef17f77fed9417d22210ceafd6525fc7"
},
{
"id": "CVE-2025-37776-3f73add2",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "257490003828435217013114758971581019951",
"length": 1386.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "smb_break_all_levII_oplock"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18b4fac5ef17f77fed9417d22210ceafd6525fc7"
},
{
"id": "CVE-2025-37776-40c796d3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "115541310942672728264567918887145884189",
"length": 130.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_free_rcu"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d73686367ad68534257cd88a36ca3c52cb8b81d8"
},
{
"id": "CVE-2025-37776-4120e34b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "61708943939737378568722809850098659527",
"length": 414.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_get_list"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d73686367ad68534257cd88a36ca3c52cb8b81d8"
},
{
"id": "CVE-2025-37776-4601be91",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"13908266148720869874295919578629796869",
"199150444374820652089234945904668636661",
"283460761981982030832383352881626380966",
"146636786904574957130740336003923717201"
],
"threshold": 0.9
},
"target": {
"file": "fs/smb/server/oplock.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@296cb5457cc6f4a754c4ae29855f8a253d52bcc6"
},
{
"id": "CVE-2025-37776-4cb26452",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"13908266148720869874295919578629796869",
"199150444374820652089234945904668636661",
"283460761981982030832383352881626380966",
"146636786904574957130740336003923717201"
],
"threshold": 0.9
},
"target": {
"file": "fs/smb/server/oplock.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d54ab1520d43e95f9b2e22d7a05fc9614192e5a5"
},
{
"id": "CVE-2025-37776-61ffd8d1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "115541310942672728264567918887145884189",
"length": 130.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_free_rcu"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18b4fac5ef17f77fed9417d22210ceafd6525fc7"
},
{
"id": "CVE-2025-37776-6b8ea65a",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "61708943939737378568722809850098659527",
"length": 414.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_get_list"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@296cb5457cc6f4a754c4ae29855f8a253d52bcc6"
},
{
"id": "CVE-2025-37776-6d479a42",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "61708943939737378568722809850098659527",
"length": 414.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_get_list"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d54ab1520d43e95f9b2e22d7a05fc9614192e5a5"
},
{
"id": "CVE-2025-37776-740a161d",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "33753689916102568803161655175276110938",
"length": 164.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_put"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@296cb5457cc6f4a754c4ae29855f8a253d52bcc6"
},
{
"id": "CVE-2025-37776-75f59fc6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "257490003828435217013114758971581019951",
"length": 1386.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "smb_break_all_levII_oplock"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d73686367ad68534257cd88a36ca3c52cb8b81d8"
},
{
"id": "CVE-2025-37776-8e2a9ce6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "115541310942672728264567918887145884189",
"length": 130.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_free_rcu"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@296cb5457cc6f4a754c4ae29855f8a253d52bcc6"
},
{
"id": "CVE-2025-37776-a24327e4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "33753689916102568803161655175276110938",
"length": 164.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_put"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d54ab1520d43e95f9b2e22d7a05fc9614192e5a5"
},
{
"id": "CVE-2025-37776-a79cffc3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"117671848137904309320997502785706790434",
"186106712060841522764536415960450722519",
"233675492959872792509719614849468010222",
"297673161369913975097803029857782507399",
"110441361941650031678690700450535543295",
"136457139137785106457473420379654451212",
"268645713191105229894573403990433545242",
"132506784893857705595800856427642080229",
"131615338604232667498034023241499157969",
"66974475008748621417939422659040026364",
"266083526495596877415680079660203604659",
"206105603016234329674771549981044455611",
"218412539854317273734300868510760990970",
"87890778038714230577882705194503091899",
"104671152720333208673394192451740692100",
"193543979868282414398223563947204194787",
"308386548896110577994214483387371268234",
"25577503787359182439277465802690700176",
"119741868650310575500840347233095124105",
"282169517262758852602757771330541777093",
"332671130016239272602943614725800331885",
"71590583638440139817398598359926044152",
"128385609344393349724480768596911616570",
"187799193499640835279581686227800870246",
"148121351268844993202566882415712255299",
"274489509873385568416171292081360395576",
"243606130916043780320526661953954100792",
"118632118166418200487221195673827736163",
"178564977392501084070056455737775883626",
"151479714084987152991466074958456174717",
"273617338194401591172159041699306628186",
"278665599836038218723980321847334347638",
"222598676153969684507619196821552198687",
"138804354969509034261560082843466203413",
"93158135081989395046701149811315239165",
"215796193471261580266049063601683838072",
"325008861173564095953022254000039904913",
"19228545219528904356623241521725804382",
"302100158157814757549818642416212024500",
"45691322219145227411568307989539991534",
"146589336017588846434727884419945777109",
"174444998144001106458097211087674497247",
"64127837912467803687984016240133635567",
"187144496363734170926032168253694129303",
"299307415711493519279768948541679865807"
],
"threshold": 0.9
},
"target": {
"file": "fs/smb/server/oplock.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d73686367ad68534257cd88a36ca3c52cb8b81d8"
},
{
"id": "CVE-2025-37776-abf54d2b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"13908266148720869874295919578629796869",
"199150444374820652089234945904668636661",
"283460761981982030832383352881626380966",
"146636786904574957130740336003923717201"
],
"threshold": 0.9
},
"target": {
"file": "fs/smb/server/oplock.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18b4fac5ef17f77fed9417d22210ceafd6525fc7"
},
{
"id": "CVE-2025-37776-d3aa036f",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "33753689916102568803161655175276110938",
"length": 164.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "opinfo_put"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18b4fac5ef17f77fed9417d22210ceafd6525fc7"
},
{
"id": "CVE-2025-37776-d5c2b808",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"13908266148720869874295919578629796869",
"199150444374820652089234945904668636661",
"283460761981982030832383352881626380966",
"146636786904574957130740336003923717201"
],
"threshold": 0.9
},
"target": {
"file": "fs/smb/server/oplock.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d73686367ad68534257cd88a36ca3c52cb8b81d8"
},
{
"id": "CVE-2025-37776-d7a9ba2e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"117671848137904309320997502785706790434",
"186106712060841522764536415960450722519",
"233675492959872792509719614849468010222",
"297673161369913975097803029857782507399",
"110441361941650031678690700450535543295",
"136457139137785106457473420379654451212",
"268645713191105229894573403990433545242",
"132506784893857705595800856427642080229",
"131615338604232667498034023241499157969",
"66974475008748621417939422659040026364",
"266083526495596877415680079660203604659",
"206105603016234329674771549981044455611",
"218412539854317273734300868510760990970",
"87890778038714230577882705194503091899",
"104671152720333208673394192451740692100",
"193543979868282414398223563947204194787",
"308386548896110577994214483387371268234",
"25577503787359182439277465802690700176",
"119741868650310575500840347233095124105",
"282169517262758852602757771330541777093",
"332671130016239272602943614725800331885",
"71590583638440139817398598359926044152",
"128385609344393349724480768596911616570",
"187799193499640835279581686227800870246",
"148121351268844993202566882415712255299",
"274489509873385568416171292081360395576",
"243606130916043780320526661953954100792",
"118632118166418200487221195673827736163",
"178564977392501084070056455737775883626",
"151479714084987152991466074958456174717",
"273617338194401591172159041699306628186",
"278665599836038218723980321847334347638",
"222598676153969684507619196821552198687",
"138804354969509034261560082843466203413",
"93158135081989395046701149811315239165",
"215796193471261580266049063601683838072",
"325008861173564095953022254000039904913",
"19228545219528904356623241521725804382",
"302100158157814757549818642416212024500",
"45691322219145227411568307989539991534",
"146589336017588846434727884419945777109",
"174444998144001106458097211087674497247",
"64127837912467803687984016240133635567",
"187144496363734170926032168253694129303",
"299307415711493519279768948541679865807"
],
"threshold": 0.9
},
"target": {
"file": "fs/smb/server/oplock.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d54ab1520d43e95f9b2e22d7a05fc9614192e5a5"
},
{
"id": "CVE-2025-37776-d9fd935d",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "257490003828435217013114758971581019951",
"length": 1386.0
},
"target": {
"file": "fs/smb/server/oplock.c",
"function": "smb_break_all_levII_oplock"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d54ab1520d43e95f9b2e22d7a05fc9614192e5a5"
}
]