CVE-2025-39838CWE-476

CVE-2025-39838

Medium · published September 19, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cifs: prevent NULL pointer dereference in UTF16 conversion

There can be a NULL pointer dereference bug here. NULL is passed to

__cifs_sfu_make_node without checks, which passes it unchecked to

cifs_strndup_to_utf16, which in turn passes it to

cifs_local_to_utf16_bytes where '*from' is dereferenced, causing a crash.

This patch adds a check for NULL 'src' in cifs_strndup_to_utf16 and

returns NULL early to prevent dereferencing NULL pointer.

Found by Linux Verification Center (linuxtesting.org) with SVACE

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-09-19T20:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.12, < 6.12.466.12.46
linux/linux_kernel≥ 6.13, < 6.16.66.16.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (5)
EPSS history
Timeline
  • 19 SEP 15:26Z
    cifs: prevent NULL pointer dereference in UTF16 conversion
    cvelistv5