CVE-2025-37952: 
Linux Kernel vulnerability analysis and mitigation

A use-after-free vulnerability (CVE-2025-37952) was discovered in the Linux kernel's ksmbd component, specifically in the _closefiletableids function. The vulnerability was disclosed on May 20, 2025. This security issue affects the Linux kernel's implementation of the SMB protocol server (NVD Database).

The vulnerability occurs when one thread destroys a file via _ksmbdclose_fd while another thread maintains a reference to it. The existing checks on fp->refcount were found to be insufficient to prevent this race condition. The vulnerability stems from inadequate synchronization in the file table management code (NVD Database).

The vulnerability could lead to a use-after-free condition in the kernel, potentially resulting in system crashes, memory corruption, or privilege escalation. This affects various Linux distributions including Ubuntu and its derivatives (Ubuntu Security).

The fix involves taking ft->lock around the section which removes the file from the file table. This prevents two threads from acquiring the same file pointer via _closefiletableids, as well as protecting other functions which retrieve a file from the IDR and which already use this same lock (NVD Database).