CVE-2025-38501

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: limit repeated connections from clients with the same IP

Repeated connections from clients with the same IP address may exhaust the max connections and prevent other normal client connections. This patch limit repeated connections from clients with the same IP.

This vulnerability presents no direct impact on Red Hat Enterprise Linux as the in-kernel SMB server (ksmbd) is neither enabled nor built in supported Red Hat kernels. The upstream flaw permits a remote attacker to induce a denial of service by initiating repetitive TCP sessions from a single host until connection thresholds are exhausted. Standard Red Hat environments rely on userspace Samba services rather than kernel-space file sharing, leaving default installations unaffected.