CVE-2025-38711
published 2025-09-04CVE-2025-38711: In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_create_link() is…
medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
In the Linux kernel, the following vulnerability has been resolved:
smb/server: avoid deadlock when linking with ReplaceIfExists
If smb2_create_link() is called with ReplaceIfExists set and the name
does exist then a deadlock will happen.
ksmbd_vfs_kern_path_locked() will return with success and the parent
directory will be locked. ksmbd_vfs_remove_file() will then remove the
file. ksmbd_vfs_link() will then be called while the parent is still
locked. It will try to lock the same parent and will deadlock.
This patch moves the ksmbd_vfs_kern_path_unlock() call to *before*
ksmbd_vfs_link() and then simplifies the code, removing the file_present
flag variable.
Affected
41 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 6.1.153-1 (bookworm) | linux 6.1.153-1 (bookworm) |
| debian | linux-6.1 | < linux 6.1.153-1 (bookworm) | linux 6.1.153-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 9d5012ffe14120f978ee34aef4df3d6cb026b7c4 | 9d5012ffe14120f978ee34aef4df3d6cb026b7c4 |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < ac98d54630d5b52e3f684d872f0d82c06c418ea9 | ac98d54630d5b52e3f684d872f0d82c06c418ea9 |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 1e858a7a51c7b8b009d8f246de7ceb7743b44a71 | 1e858a7a51c7b8b009d8f246de7ceb7743b44a71 |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 814cfdb6358d9b84fcbec9918c8f938cc096a43a | 814cfdb6358d9b84fcbec9918c8f938cc096a43a |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < a7dddd62578c2eb6cb28b8835556a121b5157323 | a7dddd62578c2eb6cb28b8835556a121b5157323 |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < a726fef6d7d4cfc365d3434e3916dbfe78991a33 | a726fef6d7d4cfc365d3434e3916dbfe78991a33 |
| linux | linux | >= 0626e6641f6b467447c81dd7678a69c66f7746cf < d5fc1400a34b4ea5e8f2ce296ea12bf8c8421694 | d5fc1400a34b4ea5e8f2ce296ea12bf8c8421694 |
| linux | linux_kernel | >= 0 < 6.1.153-1 | 6.1.153-1 |
| linux | linux_kernel | >= 0 < 6.12.43-1 | 6.12.43-1 |
| linux | linux_kernel | >= 0 < 6.16.3-1 | 6.16.3-1 |
| linux | linux_kernel | >= 0 < 5.15.0-163.173 | 5.15.0-163.173 |
| linux | linux_kernel | >= 0 < 6.8.0-100.100 | 6.8.0-100.100 |
| linux | linux_kernel | >= 5.15 < 5.15.190 | 5.15.190 |
| linux | linux_kernel | >= 5.16 < 6.1.149 | 6.1.149 |
| linux | linux_kernel | >= 6.13 < 6.15.11 | 6.15.11 |
| linux | linux_kernel | >= 6.16 < 6.16.2 | 6.16.2 |
| linux | linux_kernel | >= 6.2 < 6.6.103 | 6.6.103 |
| linux | linux_kernel | >= 6.7 < 6.12.43 | 6.12.43 |
| msrc | azl3_kernel_6.6.96.2-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_kernel_6.6.96.2-2_on_azure_linux_3.0 | — | — |
| msrc | azl3_libreswan_4.7-6_on_azure_linux_3.0 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM