CVE-2025-38561

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix Preauh_HashValue race condition

If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashValue at session setup phase. It can be freed together with session at connection termination phase.

This vulnerability does not impact Red Hat Enterprise Linux as the in-kernel SMB server (ksmbd) is not built or supported in Red Hat kernels. The upstream flaw involves a race condition during concurrent SMB session negotiations that can lead to unexpected memory release and denial of service. Because Red Hat relies on userspace Samba packages for SMB file-sharing services, supported systems lack the affected kernel subsystem and are not exposed.