CVE-2025-37899 PoC — ksmbd: fix use-after-free in session logoff

Source

https://github.com/SeanHeelan/o3_finds_cve-2025-37899

Associated Vulnerability

Title: ksmbd: fix use-after-free in session logoff (CVE-2025-37899)
Description:In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd. The handler for that connection could be in the smb2_sess_setup function which makes use of sess->user.

Description

Artefacts for blog post on finding CVE-2025-37899 with o3

Readme

This is the artefact repository associated with my blog post [How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation](https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/). See that post for details.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →