What is CVE-2025-38561?

CVE-2025-38561 is a Medium severity Linux kernel vulnerability with a CVSS score of 4.7 out of 10, classified as a Race Condition flaw (CWE-362), affecting Linux kernel versions from 5.15 onward and patched in 6.1.148, 6.6.102, 6.12.42 and others. CVE-2025-38561 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2025-38561?

CVE-2025-38561 has a CVSS score of 4.7 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2025-38561?

Yes, CVE-2025-38561 has been patched. Fixed versions include 6.1.148, 6.6.102, 6.12.42 and others. If you are running Linux kernel 5.15 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2025-38561 actively exploited?

CVE-2025-38561 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Race Condition (CWE-362)?

The product contains a code sequence that can run concurrently with other code, creating unexpected states. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/362.html

CVE-2025-38561

Medium

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.

Package Linux Kernel

Published 2025-08-19

Last modified 2026-01-07

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

4.7

out of 10

Medium

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type

CWE-362

CVE-2025-38561 is a Race Condition vulnerability

What is Race Condition?

The product contains a code sequence that can run concurrently with other code, creating unexpected states. Learn more on MITRE CWE

Affected versions

Linux kernel versions 5.15 and later are affected. Fixed in 6.1.148, 6.6.102, 6.12.42, 6.15.10, 6.16.1, 6.17 and their respective stable series.

Affected from

≥ 5.15

Fixed in

✓ 6.1.148 6.1.x ✓ 6.6.102 6.6.x ✓ 6.12.42 6.12.x ✓ 6.15.10 6.15.x ✓ 6.16.1 6.16.x ✓ 6.17

References

8 total

Kernel Git
https://git.kernel.org/stable/c/44a3059c4c8cc635a1fb2afd692d0730ca1ba4b6

Patch
Kernel Git
https://git.kernel.org/stable/c/6613887da1d18dd2ecfd6c6148a873c4d903ebdc

Patch
Kernel Git
https://git.kernel.org/stable/c/7d7c0c5304c88bcbd7a85e9bcd61d27e998ba5fc

Patch
Kernel Git
https://git.kernel.org/stable/c/b69fd87076daa66f3d186bd421a7b0ee0cb45829

Patch
Kernel Git
https://git.kernel.org/stable/c/edeecc7871e8fc0878d53ce286c75040a0e38f6c

Patch

Showing 5 of 8 references View all on NVD

Details

CVE ID CVE-2025-38561

Severity Medium

CVSS score 4.7 / 10

CVSS version 3.1

Published 2025-08-19

Modified 2026-01-07

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2025-38561?

CVE-2025-38561 is a Medium severity Linux kernel vulnerability with a CVSS score of 4.7 out of 10 , classified as a Race Condition flaw (CWE-362) . It affects Linux kernel versions from 5.15 onward and has been patched in 6.1.148, 6.6.102, 6.12.42 and others. CVE-2025-38561 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2025-38561?

CVE-2025-38561 has a CVSS score of 4.7 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2025-38561?

Yes. CVE-2025-38561 has been patched. Fixed versions include 6.1.148, 6.6.102, 6.12.42 and others. If you are running Linux kernel 5.15 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2025-38561 actively exploited?

No. CVE-2025-38561 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.