CVE-2025-38208
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2025-07-04
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: add NULL check in automount_fullpath page is checked for null in __build_path_from_dentry_optional_prefix when tcon->origin_fullpath is not set. However, the check is missing when it is set. Add a check to prevent a potential NULL pointer dereference.
Weakness Classification (1)
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | d5a863a153e90996ab2aef6b9e08d509f4d5662b < 37166d63e42c34846a16001950ecec96229a8d17 |
| Linux | Linux | d5a863a153e90996ab2aef6b9e08d509f4d5662b < a9e916fa5c7d0ec2256aa44aa24ddd92f529ce35 |
| Linux | Linux | d5a863a153e90996ab2aef6b9e08d509f4d5662b < cce8e71ca1f7ad9045707f0d22490c1e9ed1df6c |
| Linux | Linux | d5a863a153e90996ab2aef6b9e08d509f4d5662b < f1e7a277a1736e12cc4bd6d93b8a5c439b8ca20c |
| Linux | Linux | e91802036b3e6e6e803a17ddf5783a6354fe5380 |
| Linux | Linux | 6.2.13 < 6.3 |
| Linux | Linux | 6.3 |
| linux | linux_kernel | < 6.6.95 |