CVE-2025-37750: smb: client: fix UAF in decryption with multichannel

Overview

Severity
High (CVSS 7.8)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploit Status
Not Exploited
Patch Tuesday
2025-May
Released
2025-11-08
Last Updated
2026-03-31
EPSS Score
0.07% (percentile: 20.2%)

Affected Products (8)

Other

  • 20725-17084
  • 20823-17084
  • 20860-17084
  • 20956-17084
  • 21094-17084
  • 17087-17086
  • 20613-17084
  • 20788-17084

Revision History

  • 2025-11-08: Information published.
  • 2025-12-07: Information published.
  • 2026-01-08: Information published.
  • 2026-01-20: Information published.
  • 2026-02-18: Information published.
  • 2026-03-04: Information published.
  • 2026-03-31: Information published.