CVE-2025-38501
ksmbd: limit repeated connections from clients with the same IP
HIGH 7.5EPSS 2.1%
In the Linux kernel, the following vulnerability has been resolved:ksmbd: limit repeated connections from clients with the same IPRepeated connections from clients with the same IP address may exhaustthe max connections and prevent other normal client connections.This patch limit repeated connections from clients with the same IP.
- Affected
- Linux
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- 2.07% chance of exploitation in the next 30 days, 81st percentile
- Published
- 2025-08-16
- Updated
- 2026-08-05
Proof-of-concept exploits (1)
- keymaker-arch/KSMBDrain4★ · 2025-09-15
Security advisories
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
- https://git.kernel.org/stable/c/6073afe64510c302b7a0683a01e32c012eff715d
- https://git.kernel.org/stable/c/7e5d91d3e6c62a9755b36f29c35288f06c3cd86b
- https://git.kernel.org/stable/c/cb092fc3a62972a4aa47c9fe356c2c6a01cd840b
- https://git.kernel.org/stable/c/e6bb9193974059ddbb0ce7763fa3882bd60d4dc3
- https://git.kernel.org/stable/c/f1ce9258bcbce2491f9f71f7882b6eed0b33ec65
- https://git.kernel.org/stable/c/fa1c47af4ff641cf9197ecdb1f8240cbb30389c1