Riskcovery

CVE-2025-38660

[ceph] parse_longname(): strrchr() expects NUL-terminated string

State
Published
Severity
9.8 Critical
Published
Aug 22, 2025
Updated
Oct 15, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

[ceph] parse_longname(): strrchr() expects NUL-terminated string

... and parse_longname() is not guaranteed that. That's the reason why it uses kmemdup_nul() to build the argument for kstrtou64(); the problem is, kstrtou64() is not the only thing that need it.

Just get a NUL-terminated copy of the entire thing and be done with that...

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • dd66df0053ef84add5e684df517aa9b498342381 to before 4b9aee707c4580511983a0998547f3b28514e6a6Affected
  • dd66df0053ef84add5e684df517aa9b498342381 to before bb80f7618832d26f7e395f52f82b1dac76223e5fAffected
  • dd66df0053ef84add5e684df517aa9b498342381 to before 3145b2b11492d61c512bbc59660bb823bc757f48Affected
  • dd66df0053ef84add5e684df517aa9b498342381 to before 493479af8af3ab907f49e99323777d498a4fbd2bAffected
  • dd66df0053ef84add5e684df517aa9b498342381 to before 101841c38346f4ca41dc1802c867da990ffb32ebAffected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.42 through 6.12.*Not affected
  • 6.15.10 through 6.15.*Not affected
  • 6.16.1 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.