cbcvebase.
CVE-2025-38711
published 2025-09-04

CVE-2025-38711: In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_create_link() is…

medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_create_link() is called with ReplaceIfExists set and the name does exist then a deadlock will happen. ksmbd_vfs_kern_path_locked() will return with success and the parent directory will be locked. ksmbd_vfs_remove_file() will then remove the file. ksmbd_vfs_link() will then be called while the parent is still locked. It will try to lock the same parent and will deadlock. This patch moves the ksmbd_vfs_kern_path_unlock() call to *before* ksmbd_vfs_link() and then simplifies the code, removing the file_present flag variable.

Affected

41 ranges· showing 25
VendorProductVersion rangeFixed in
debiandebian_linux
debianlinux< linux 6.1.153-1 (bookworm)linux 6.1.153-1 (bookworm)
debianlinux-6.1< linux 6.1.153-1 (bookworm)linux 6.1.153-1 (bookworm)
linuxlinux
linuxlinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf < 9d5012ffe14120f978ee34aef4df3d6cb026b7c49d5012ffe14120f978ee34aef4df3d6cb026b7c4
linuxlinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf < ac98d54630d5b52e3f684d872f0d82c06c418ea9ac98d54630d5b52e3f684d872f0d82c06c418ea9
linuxlinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf < 1e858a7a51c7b8b009d8f246de7ceb7743b44a711e858a7a51c7b8b009d8f246de7ceb7743b44a71
linuxlinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf < 814cfdb6358d9b84fcbec9918c8f938cc096a43a814cfdb6358d9b84fcbec9918c8f938cc096a43a
linuxlinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf < a7dddd62578c2eb6cb28b8835556a121b5157323a7dddd62578c2eb6cb28b8835556a121b5157323
linuxlinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf < a726fef6d7d4cfc365d3434e3916dbfe78991a33a726fef6d7d4cfc365d3434e3916dbfe78991a33
linuxlinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf < d5fc1400a34b4ea5e8f2ce296ea12bf8c8421694d5fc1400a34b4ea5e8f2ce296ea12bf8c8421694
linuxlinux_kernel>= 0 < 6.1.153-16.1.153-1
linuxlinux_kernel>= 0 < 6.12.43-16.12.43-1
linuxlinux_kernel>= 0 < 6.16.3-16.16.3-1
linuxlinux_kernel>= 0 < 5.15.0-163.1735.15.0-163.173
linuxlinux_kernel>= 0 < 6.8.0-100.1006.8.0-100.100
linuxlinux_kernel>= 5.15 < 5.15.1905.15.190
linuxlinux_kernel>= 5.16 < 6.1.1496.1.149
linuxlinux_kernel>= 6.13 < 6.15.116.15.11
linuxlinux_kernel>= 6.16 < 6.16.26.16.2
linuxlinux_kernel>= 6.2 < 6.6.1036.6.103
linuxlinux_kernel>= 6.7 < 6.12.436.12.43
msrcazl3_kernel_6.6.96.2-1_on_azure_linux_3.0
msrcazl3_kernel_6.6.96.2-2_on_azure_linux_3.0
msrcazl3_libreswan_4.7-6_on_azure_linux_3.0

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM