CVE-2025-21660

ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked

State: Published
Severity: Not scored
Published: Jan 21, 2025
Updated: May 23, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked

When `ksmbd_vfs_kern_path_locked` met an error and it is not the last entry, it will exit without restoring changed path buffer. But later this buffer may be used as the filename for creation.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d1b2d2a9c912fc7b788985fbaf944e80f4b3f2af to before 13e41c58c74baa71f34c0830eaa3c29d53a6e964Affected 6ab95e27b77730de3fa2d601db3764490c5eede2 to before 65b31b9d992c0fb0685c51a0cf09993832734fc4Affected c5a709f08d40b1a082e44ffcde1aea4d2822ddd5 to before 51669f4af5f7959565b48e55691ba92fabf5c587Affected c5a709f08d40b1a082e44ffcde1aea4d2822ddd5 to before 2ac538e40278a2c0c051cca81bcaafc547d61372Affected d205cb1a13b37b2660df70a972dedc8c4ba1c2e8Affected c1e27b70e79050530c671b9dab688386c86f039aAffected 6.1.113 to before 6.1.125Affected 6.6.54 to before 6.6.72Affected 6.10.13 to before 6.11Affected 6.11.2 to before 6.12Affected
LinuxLinux	6.12Affected before 6.12Not affected 6.1.125 through 6.1.Not affected 6.6.72 through 6.6.Not affected 6.12.10 through 6.12.*Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

d1b2d2a9c912fc7b788985fbaf944e80f4b3f2af to before 13e41c58c74baa71f34c0830eaa3c29d53a6e964Affected
6ab95e27b77730de3fa2d601db3764490c5eede2 to before 65b31b9d992c0fb0685c51a0cf09993832734fc4Affected
c5a709f08d40b1a082e44ffcde1aea4d2822ddd5 to before 51669f4af5f7959565b48e55691ba92fabf5c587Affected
c5a709f08d40b1a082e44ffcde1aea4d2822ddd5 to before 2ac538e40278a2c0c051cca81bcaafc547d61372Affected
d205cb1a13b37b2660df70a972dedc8c4ba1c2e8Affected
c1e27b70e79050530c671b9dab688386c86f039aAffected
6.1.113 to before 6.1.125Affected
6.6.54 to before 6.6.72Affected
6.10.13 to before 6.11Affected
6.11.2 to before 6.12Affected

LinuxLinux

6.12Affected
before 6.12Not affected
6.1.125 through 6.1.*Not affected
6.6.72 through 6.6.*Not affected
6.12.10 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.