Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-37956

ksmbd: prevent rename with empty string

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to ksmbd server. It will cause a kernel oops from d_alloc. This patch return the error when attempting to rename a file or directory with an empty new name string.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 35e2964e93d95185d2db0c0ffd9959d0197b3956affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 6ee551672c8cf36108b0cfba92ec0c7c28ac3439affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < c57301e332cc413fe0a7294a90725f4e21e9549daffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < d7f2c00acb1ef64304fd40ac507e9213ff1d9b5caffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to < 53e3e5babc0963a92d856a5ec0ce92c59f54bc12affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.91 to ≤ 6.6.*unaffected
  • 6.12.29 to ≤ 6.12.*unaffected
  • 6.14.7 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References