CVE-2025-38437

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix potential use-after-free in oplock/lease break ack

If ksmbd_iov_pin_rsp return error, use-after-free can happen by accessing opinfo->state and opinfo_put and ksmbd_fd_put could called twice.

This flaw does not impact Red Hat Enterprise Linux because the in-kernel SMB server (ksmbd) is not enabled or shipped in Red Hat kernels. Supported Red Hat enterprise deployments use user-space Samba implementations for SMB network sharing rather than the kernel server implementation. Consequently, Red Hat kernel packages lack the vulnerable code path and remain unaffected.