by Kastro
Paper/Archive/CVE-2025-38737

CVE-2025-38737

Linux Linux — cifs: Fix oops due to uninitialised variable

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 31.6.316 × 206.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.

Affected

ProductAffectedFixed inSource
Linuxa2906d3316fc19bf0ade84618bb73eab604c447e – < 4931fe2dbe1cc0e7d350a4b51b0b330e43971d984931fe2dbe1cc0e7d350a4b51b0b330e43971d98CNA
Linuxa2906d3316fc19bf0ade84618bb73eab604c447e – < 6adaa9fae36f848afa7278945d725e197e33c4966adaa9fae36f848afa7278945d725e197e33c496CNA
Linuxa2906d3316fc19bf0ade84618bb73eab604c447e – < 453a6d2a68e54a483d67233c6e1e24c4095ee4be453a6d2a68e54a483d67233c6e1e24c4095ee4beCNA
Linux6.126.12.44CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/4931fe2dbe1cc0e7d350a4b51b0b330e43971d98refgit.kernel.org/stable/c/6adaa9fae36f848afa7278945d725e197e33c496refgit.kernel.org/stable/c/453a6d2a68e54a483d67233c6e1e24c4095ee4be