CVE-2025-37926

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in ksmbd_session_rpc_open

A UAF issue can occur due to a race condition between ksmbd_session_rpc_open() and __session_rpc_close(). Add rpc_lock to the session to protect it.

This vulnerability does not affect supported Red Hat Enterprise Linux releases because the in-kernel SMB server (ksmbd) is neither enabled nor shipped in Red Hat enterprise kernels. Red Hat environments deploy user-space Samba implementations for SMB file sharing services rather than the kernel-level ksmbd module. Consequently, systems running supported Red Hat kernels are not exposed to this race condition.