CVE-2025-37750 is a use-after-free vulnerability (CWE-416) in the SMB client decryption implementation with multichannel support in the Linux kernel version 5.14.0-570.17.1.el9_6. The vulnerability is fixed by a kpatch live patch module provided by Red Hat for Red Hat Enterprise Linux 9 and its extended update support variants. The patch modifies the running kernel code to prevent the use-after-free condition during SMB decryption operations. The advisory rates the update as Important and recommends applying the patch and rebooting the system to activate the fix.

Successful exploitation of this use-after-free vulnerability could lead to memory corruption within the SMB client code in the kernel, potentially causing system instability or enabling further privilege escalation or code execution attacks. The advisory classifies the security impact as Important (high severity). No known exploits in the wild have been reported at this time.

A security update is available as a kpatch live patch module for kernel-5.14.0-570.17.1.el9_6 on Red Hat Enterprise Linux 9 and related variants. Users should apply the kpatch-patch-5_14_0-570_17_1 update provided by Red Hat and reboot the system to ensure the patch is fully applied. Refer to Red Hat's official update instructions at https://access.redhat.com/articles/11258 for detailed guidance.