CVE-2025-37750 smb: client: fix UAF in decryption with multichannel

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Address UAF Vulnerabilities in SMB Client Two vulnerabilities in the SMB client have been addressed, specifically CVE-2025-37750 and CVE-2024-26928. CVE-2025-37750, published on May 1, 2025, fixes a use-after-free (UAF) issue in decryption with multichannel, while CVE-2024-26928, published on April 28, 2024, addresses a potential UAF in the cifs_debug_files_proc_show() function. Affected systems include those utilizing the SMB client in Microsoft environments. 3 sources 47