Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-38737

cifs: Fix oops due to uninitialised variable

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a2906d3316fc19bf0ade84618bb73eab604c447e to < 4931fe2dbe1cc0e7d350a4b51b0b330e43971d98affected
  • a2906d3316fc19bf0ade84618bb73eab604c447e to < 6adaa9fae36f848afa7278945d725e197e33c496affected
  • a2906d3316fc19bf0ade84618bb73eab604c447e to < 453a6d2a68e54a483d67233c6e1e24c4095ee4beaffected

Linux Linux

Default version status: affected

  • 6.12affected
  • 0 to < 6.12unaffected
  • 6.12.44 to ≤ 6.12.*unaffected
  • 6.16.4 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References