Riskcovery

CVE-2025-39838

cifs: prevent NULL pointer dereference in UTF16 conversion

State
Published
Severity
Not scored
Published
Sep 19, 2025
Updated
May 12, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: prevent NULL pointer dereference in UTF16 conversion

There can be a NULL pointer dereference bug here. NULL is passed to __cifs_sfu_make_node without checks, which passes it unchecked to cifs_strndup_to_utf16, which in turn passes it to cifs_local_to_utf16_bytes where '*from' is dereferenced, causing a crash.

This patch adds a check for NULL 'src' in cifs_strndup_to_utf16 and returns NULL early to prevent dereferencing NULL pointer.

Found by Linux Verification Center (linuxtesting.org) with SVACE

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 41d3f256c6a5e41eb32b87168399c0facd512dc0 to before 1f797f062b5cf13a1c2bcc23285361baaa7c9260Affected
  • 41d3f256c6a5e41eb32b87168399c0facd512dc0 to before 3c26a8d30ed6b53a52a023ec537dc50a6d34a67aAffected
  • 41d3f256c6a5e41eb32b87168399c0facd512dc0 to before 70bccd9855dae56942f2b18a08ba137bb54093a0Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.46 through 6.12.*Not affected
  • 6.16.6 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.