CVE-2025-22037: linux kernel from 6.6 (inclusive), before 6.6.107 (exclusive), from 6.12 (inclusive), before 6.12.23 (exclusive), from…

Affected technology

linux kernel · from 6.6 (inclusive), before 6.6.107 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.23 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.11 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.2 (exclusive)
linux

Linux · 0626e6641f6b467447c81dd7678a69c66f7746cf to before cce57cd8c5dead24127cf2308fdd60fcad2d6ba6, 0626e6641f6b467447c81dd7678a69c66f7746cf to before ca8bed31edf728a662ef9d6f39f50e7a7dc2b5ad, 0626e6641f6b467447c81dd7678a69c66f7746cf to before 8f216b33a5e1b3489c073b1ea1b3d7cb63c8dc4d, 0626e6641f6b467447c81dd7678a69c66f7746cf to before b8eb243e670ecf30e91524dd12f7260dac07d335, 0626e6641f6b467447c81dd7678a69c66f7746cf to before c8b5b7c5da7d0c31c9b7190b4a7bba5281fc4780
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: fs/smb/server/connection.h, fs/smb/server/mgmt/user_session.c, fs/smb/server/smb2pdu.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.