CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call
First published: Fri May 09 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call cifs_server_dbg() implies server to be non-NULL so move call under condition to avoid NULL pointer dereference. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/ba3ce6c60cd5db258687dfeba9fc608f5e7cadf3
- https://git.kernel.org/stable/c/9c9000cb91b986eb7f75835340c67857ab97c09b
- https://git.kernel.org/stable/c/b2a1833e1c63e2585867ebeaf4dd41494dcede4b
- https://git.kernel.org/stable/c/864ba5c651b03830f36f0906c21af05b15c1aaa6
- https://git.kernel.org/stable/c/e0717385f5c51e290c2cd2ad4699a778316b5132
- https://git.kernel.org/stable/c/20048e658652e731f5cadf4a695925e570ca0ff9
- https://git.kernel.org/stable/c/6c14ee6af8f1f188b668afd6d003f7516a507b08
- https://git.kernel.org/stable/c/b4885bd5935bb26f0a414ad55679a372e53f9b9b
Frequently Asked Questions
What is the severity of CVE-2025-37844?
CVE-2025-37844 is classified as a low severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-37844?
To fix CVE-2025-37844, ensure that you upgrade to the latest version of the Linux kernel where the vulnerability has been addressed.
What systems are affected by CVE-2025-37844?
CVE-2025-37844 affects various versions of the Linux kernel that implement the CIFS (Common Internet File System) protocol.
What type of threat does CVE-2025-37844 pose?
CVE-2025-37844 poses a threat of a NULL pointer dereference, potentially leading to a denial of service condition.
Who discovered CVE-2025-37844?
CVE-2025-37844 was discovered by the Linux Verification Center.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/description
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/last-modified-date
- agent/source
- agent/event
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/linux kernel