linux-azure-fips

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
  - SMB network file system;
(CVE-2025-22037, CVE-2025-37899)

linux-azure-fips vulnerabilities (CVE-2025-22037)

linux-nvidia-6.8

linux-nvidia

linux-nvidia-lowlatency

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities (CVE-2025-22037)

linux-aws-fips

linux-aws-fips vulnerabilities (CVE-2025-22037)

linux-aws-6.8

linux-ibm-6.8

linux-aws

linux-ibm

linux-xilinx

linux-aws, linux-aws-6.8, linux-ibm, linux-ibm-6.8, linux-xilinx vulnerabilities (CVE-2025-22037)

linux-fips

linux-gcp-fips

linux-fips, linux-gcp-fips vulnerabilities (CVE-2025-22037)

linux-realtime-6.8

linux-realtime

linux-realtime, linux-realtime-6.8 vulnerabilities (CVE-2025-22037)

linux-gcp-6.8

linux-oracle-6.8

linux-gcp

linux-gke

linux-gcp, linux-gcp-6.8, linux-gke, linux-oracle-6.8 vulnerabilities (CVE-2025-22037)

linux-raspi-realtime

linux-raspi-realtime vulnerabilities (CVE-2025-22037)

linux-hwe-6.8

linux-lowlatency-hwe-6.8

linux

linux-gkeop

linux-lowlatency

linux-oracle

linux-raspi

linux, linux-gkeop, linux-hwe-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-raspi…

linux-azure

linux-lts-xenial

linux-aws-hwe

linux-hwe

linux-hwe-edge

linux-kvm

linux-aws-5.0

linux-aws-5.3

linux-aws-5.4

linux-azure-4.15

linux-azure-5.3

linux-azure-5.4

linux-azure-edge

linux-gcp-4.15

linux-gcp-5.3

linux-gcp-5.4

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe-5.4

linux-ibm-5.4

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-oracle-5.4

linux-raspi-5.4

linux-aws-5.11

linux-aws-5.13

linux-aws-5.15

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.15

linux-azure-5.8

linux-azure-fde

linux-azure-fde-5.15

linux-bluefield

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.15

linux-gcp-5.8

linux-gke-5.15

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.15

linux-hwe-5.8

linux-ibm-5.15

linux-intel-5.13

linux-intel-iotg-5.15

linux-iot

linux-lowlatency-hwe-5.15

linux-nvidia-tegra-5.15

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.15

linux-oracle-5.8

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.15

linux-riscv-5.8

A null pointer dereference vulnerability in the Linux kernel's ksmbd component was fixed. The flaw allowed a client sending a malformed SMB2 negotiate request to cause ksmbd to return an error but still accept an SMB2 session setup request without proper preauthentication info allocated. The patch introduces a connection status check to ignore session setup requests if the negotiate phase is incomplete. This vulnerability has a CVSS score of 7.5 and is considered medium severity. Multiple specific Linux kernel versions are affected. An official patch is available as detailed in the Ubuntu security advisory USN-7594-1.

CVE-2025-22037: ksmbd: fix null pointer dereference in alloc_preauth_hash() in Linux kernel

Search: CVE-2025-22037