CVE-2025-37899 PoC — Linux kernel 安全漏洞

Source

https://github.com/SeanHeelan/o3_finds_cve-2025-37899

Associated Vulnerability

Title:Linux kernel 安全漏洞 (CVE-2025-37899)
Description:Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于ksmbd在会话注销时未正确处理sess->user引用，可能导致释放后重用。

Description

Artefacts for blog post on finding CVE-2025-37899 with o3

Readme

This is the artefact repository associated with my blog post [How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation](https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/). See that post for details.

File Snapshot


 [4.0K]  /data/pocs/48e99ca9208a9c6756b88eb95a4aee2141db2510
├── [ 213]  audit_request.prompt
├── [7.5K]  claude_3_7_finds_CVE-2025-37778.txt
├── [1.2K]  ksmbd_explainer.prompt
├── [4.0K]  o3_finds_CVE-2025-37778.txt
├── [ 348]  README.md
├── [ 98K]  session_setup_code.prompt
├── [ 552]  session_setup_context_explainer.prompt
└── [1.9K]  system_prompt_uafs.prompt

0 directories, 8 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!