[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2025-37952":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":29,"references":31,"score":36,"epss_score":37,"epss_percentile":38,"is_kev":19,"cisa_kev_date_added":39,"cisa_kev_due_date":39,"cisa_ssvc":40,"attack_mappings":46,"exploits":53},83001,"CVE-2025-37952","EUVD-2025-15906","In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: Fix UAF in __close_file_table_ids\n\nA use-after-free is possible if one thread destroys the file\nvia __ksmbd_close_fd while another thread holds a reference to\nit. The existing checks on fp->refcount are not sufficient to\nprevent this.\n\nThe fix takes ft->lock around the section which removes the\nfile from the file table. This prevents two threads acquiring the\nsame file pointer via __close_file_table_ids, as well as the other\nfunctions which retrieve a file from the IDR and which already use\nthis same lock.","2025-05-20T16:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":18,"confidentialityImpact":15},"UNCHANGED","3.1",7.8,"LOCAL","HIGH","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE","LOW",false,[21],"CWE-416",[23,24,25,26,27,28],"cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*",[30],"Linux Linux Kernel",[32,33,34,35],"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F16727e442568a46d9cca69fe2595896de86e120d","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F36991c1ccde2d5a521577c448ffe07fcccfe104d","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F9e9841e232b51171ddf3bc4ee517d5d28dc8cad6","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Ffec1f9e9a650e8e7011330a085c77e7bf2a08ea9",0.39,0.00372,0.30884,null,{"timestamp":39,"automatable":41,"tech_impact":42,"exploitation":43,"cisa_decision":44,"cisa_remediation_timeline":45},"no","partial","none",{},"FSU",[47],{"name":48,"source":49,"tactics":50,"technique_id":52},"Exploitation for Privilege Escalation","attack_vector",[51],"privilege-escalation","T1068",[]]