CVE-2025-21660

ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked

published January 21, 2025

CVSS
—
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked

When `ksmbd_vfs_kern_path_locked` met an error and it is not the last

entry, it will exit without restoring changed path buffer. But later this

buffer may be used as the filename for creation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Published
2025-01-21T12:18Z
EPSS history
Timeline
  • 21 JAN 12:18Z
    ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
    cvelistv5