CVE-2025-38561 is a race condition vulnerability in the ksmbd component of the Linux kernel. It occurs when a client sends multiple session setup requests, leading to a race in handling Preauh_HashValue. The issue is due to improper freeing of sess->Preauh_HashValue during session setup, which should instead be freed at connection termination.