CVE-2025-38562
19.08.2025, 17:15
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference error in generate_encryptionkey If client send two session setups with krb5 authenticate to ksmbd, null pointer dereference error in generate_encryptionkey could happen. sess->Preauth_HashValue is set to NULL if session is valid. So this patch skip generate encryption key if session is valid.Enginsight
Awaiting analysis
This vulnerability is currently awaiting analysis.

Debian Releases
Vulnerability Media Exposure
References