CVE-2025-39825CWE-362

CVE-2025-39825

High · published September 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
1.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix race with concurrent opens in rename(2)

Besides sending the rename request to the server, the rename process

also involves closing any deferred close, waiting for outstanding I/O

to complete as well as marking all existing open handles as deleted to

prevent them from deferring closes, which increases the race window

for potential concurrent opens on the target file.

Fix this by unhashing the dentry in advance to prevent any concurrent

opens on the target.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00118 · 1.6th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2025-09-16T17:16Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 5.13, < 6.1.1506.1.150
linux/linux_kernel≥ 6.2, < 6.6.1046.6.104
linux/linux_kernel≥ 6.7, < 6.12.456.12.45
linux/linux_kernel≥ 6.13, < 6.16.56.16.5
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (7)
EPSS history
Timeline
  • 16 SEP 13:00Z
    smb: client: fix race with concurrent opens in rename(2)
    cvelistv5