CVE-2025-38431
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2025-07-25
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix regression with native SMB symlinks Some users and customers reported that their backup/copy tools started to fail when the directory being copied contained symlink targets that the client couldn't parse - even when those symlinks weren't followed. Fix this by allowing lstat(2) and readlink(2) to succeed even when the client can't resolve the symlink target, restoring old behavior.
Affected Software (7)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 12b466eb52d926802b6898d2cb7e67386467f54a < 6ddaf7567080c7de2e0c99efca2ee1e6b79beea5 |
| Linux | Linux | 12b466eb52d926802b6898d2cb7e67386467f54a < ff8abbd248c1f52df0c321690b88454b13ff54b2 |
| Linux | Linux | 6.14 |
| linux | linux_kernel | 6.14 – 6.15.5 |
| linux | linux_kernel | 6.16 |
| linux | linux_kernel | 6.16 |
| linux | linux_kernel | 6.16 |
References & Advisories (2)
Patch
Patch