CVE-2025-22037

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix null pointer dereference in alloc_preauth_hash()

The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup even thought conn->preauth_info is not allocated. This patch add KSMBD_SESS_NEED_SETUP status of connection to ignore session setup request if smb2 negotiate phase is not complete.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires interacting with the in-kernel SMB server, limiting the potential consequence primarily to a system denial of service. The affected ksmbd module is not enabled or shipped in supported Red Hat Enterprise Linux kernels, as SMB file sharing is handled by the userspace Samba suite instead. Consequently, standard Red Hat enterprise installations are not exposed to this flaw under default configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.