Riskcovery

CVE-2025-38431

smb: client: fix regression with native SMB symlinks

State
Published
Severity
Not scored
Published
Jul 25, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix regression with native SMB symlinks

Some users and customers reported that their backup/copy tools started to fail when the directory being copied contained symlink targets that the client couldn't parse - even when those symlinks weren't followed.

Fix this by allowing lstat(2) and readlink(2) to succeed even when the client can't resolve the symlink target, restoring old behavior.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 12b466eb52d926802b6898d2cb7e67386467f54a to before 6ddaf7567080c7de2e0c99efca2ee1e6b79beea5Affected
  • 12b466eb52d926802b6898d2cb7e67386467f54a to before ff8abbd248c1f52df0c321690b88454b13ff54b2Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.15.5 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.