A remotely exploitable zero-day vulnerability, CVE-2025-37899, has been discovered in the Linux kernel's Server Message Block (SMB) protocol using OpenAI's o3 model. This critical flaw is identified as a use-after-free bug in the SMB 'logoff' command handler, allowing an object to be freed while still accessible by another thread.
Why This Matters
Publisher reporting describes a security event affecting openai. BugSkan could not yet bind a CVE or affected version, so treat the source details as the current record.
Recommended Action
Confirm whether Linux is present in your environment, compare your versions against the report, and apply available vendor patches or mitigations.
CVE: CVE-2025-37899
Affected
OpenAILinux kernelSMB ProtocolServer Message Block (SMB) protocolDay Vulnerability DiscoveredLinux Zero