Riskcovery

CVE-2025-37844

cifs: avoid NULL pointer dereference in dbg call

State
Published
Severity
Not scored
Published
May 9, 2025
Updated
May 23, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: avoid NULL pointer dereference in dbg call

cifs_server_dbg() implies server to be non-NULL so move call under condition to avoid NULL pointer dereference.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e79b0332ae06b4895dcecddf4bbc5d3917e9383c to before ba3ce6c60cd5db258687dfeba9fc608f5e7cadf3Affected
  • e79b0332ae06b4895dcecddf4bbc5d3917e9383c to before 9c9000cb91b986eb7f75835340c67857ab97c09bAffected
  • e79b0332ae06b4895dcecddf4bbc5d3917e9383c to before b2a1833e1c63e2585867ebeaf4dd41494dcede4bAffected
  • e79b0332ae06b4895dcecddf4bbc5d3917e9383c to before 864ba5c651b03830f36f0906c21af05b15c1aaa6Affected
  • e79b0332ae06b4895dcecddf4bbc5d3917e9383c to before e0717385f5c51e290c2cd2ad4699a778316b5132Affected
  • e79b0332ae06b4895dcecddf4bbc5d3917e9383c to before 20048e658652e731f5cadf4a695925e570ca0ff9Affected
  • e79b0332ae06b4895dcecddf4bbc5d3917e9383c to before 6c14ee6af8f1f188b668afd6d003f7516a507b08Affected
  • e79b0332ae06b4895dcecddf4bbc5d3917e9383c to before b4885bd5935bb26f0a414ad55679a372e53f9b9bAffected
  • 53e83828d352304fec5e19751f38ed8c65e6ec2fAffected
  • 5.6.7 to before 5.7Affected
LinuxLinux
  • 5.7Affected
  • before 5.7Not affected
  • 5.10.237 through 5.10.*Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.135 through 6.1.*Not affected
  • 6.6.88 through 6.6.*Not affected
  • 6.12.24 through 6.12.*Not affected
  • 6.13.12 through 6.13.*Not affected
  • 6.14.3 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.