Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfs_stream_write() did not validate whether the write offset (*pos) was within the bounds of the existing stream data length (v_len). If *pos was greater than or equal to v_len, this could lead to an out-of-bounds memory write. This patch adds a check to ensure *pos is less than v_len before proceeding. If the condition fails, -EINVAL is returned.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
ksmbd - Exploiting CVE-2025-37947 (3/3) #CVE202537947 #ksmbd #OOBWrite #PrivilegeEscalation #LinuxKernel https://blog.doyensec.com/2025/10/08/ksmbd-3.html
Post summary
The tweet announces a Proof‑of‑Concept exploitation of CVE‑2025‑37947 involving an out‑of‑bounds write in the Linux kernel that enables privilege escalation, with no mention of active attacks, patches, or false positives.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 11.0 | - | - |
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 6.15 | - | - |
| OS | linux | linux_kernel | 6.15 | - | - |
| OS | linux | linux_kernel | 6.15 | - | - |
| OS | linux | linux_kernel | 6.15 | - | - |
| OS | linux | linux_kernel | 6.15 | - | - |