CVE-2025-38051

A use-after-free flaw was found in cifs_fill_dirent in fs/cifs/readdir.c in smb client in the Linux Kernel. This flaw could allow an attacker to crash the system due to race problem. This vulnerability could even lead to a kernel information leak problem.

This Moderate impact flaw in the Linux kernel's SMB client (CIFS) can lead to a system crash or information disclosure due to a race problem, leading to a use-after-free vulnerability during directory operations. Red Hat Enterprise Linux 8, 9, and 10 are affected when utilizing the CIFS client functionality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.