CVE-2025-21660
ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
21 jan 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
When `ksmbd_vfs_kern_path_locked` met an error and it is not the last
entry, it will exit without restoring changed path buffer. But later this
buffer may be used as the filename for creation.
Produtos afetados
Linux · LinuxReferências
https://git.kernel.org/stable/c/13e41c58c74baa71f34c0830eaa3c29d53a6e964https://git.kernel.org/stable/c/2ac538e40278a2c0c051cca81bcaafc547d61372https://git.kernel.org/stable/c/51669f4af5f7959565b48e55691ba92fabf5c587https://git.kernel.org/stable/c/65b31b9d992c0fb0685c51a0cf09993832734fc4https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html