CVE-2025-22038 is a high-severity vulnerability in the Linux kernel's ksmbd component. It involves an out-of-bounds read caused by accessing an array element without verifying that the index is valid. Specifically, the code accesses psid->sub_auth[psid->num_subauth - 1] without checking if num_subauth is zero, leading to potential memory safety issues. A patch has been applied to add validation ensuring num_subauth is not zero before accessing sub_auth.