Riskcovery

CVE-2025-38208

smb: client: add NULL check in automount_fullpath

State
Published
Severity
Not scored
Published
Jul 4, 2025
Updated
May 23, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: add NULL check in automount_fullpath

page is checked for null in __build_path_from_dentry_optional_prefix when tcon->origin_fullpath is not set. However, the check is missing when it is set. Add a check to prevent a potential NULL pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d5a863a153e90996ab2aef6b9e08d509f4d5662b to before 37166d63e42c34846a16001950ecec96229a8d17Affected
  • d5a863a153e90996ab2aef6b9e08d509f4d5662b to before a9e916fa5c7d0ec2256aa44aa24ddd92f529ce35Affected
  • d5a863a153e90996ab2aef6b9e08d509f4d5662b to before cce8e71ca1f7ad9045707f0d22490c1e9ed1df6cAffected
  • d5a863a153e90996ab2aef6b9e08d509f4d5662b to before f1e7a277a1736e12cc4bd6d93b8a5c439b8ca20cAffected
  • e91802036b3e6e6e803a17ddf5783a6354fe5380Affected
  • 6.2.13 to before 6.3Affected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.95 through 6.6.*Not affected
  • 6.12.35 through 6.12.*Not affected
  • 6.15.4 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.