CVE-2025-37777 is a use-after-free vulnerability in the Linux kernel's ksmbd component, specifically in the __smb2_lease_break_noti() function. The issue arises because the tcp_transport resource is freed prematurely while the ksmbd connection may still be referenced asynchronously, leading to a use-after-free condition when ksmbd_conn_write is called. This vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability.