CVE-2025-38431: smb: client: fix regression with native SMB symlinks
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix regression with native SMB symlinks
Some users and customers reported that their backup/copy tools started to fail when the directory being copied contained symlink targets that the client couldn't parse - even when those symlinks weren't followed.
Fix this by allowing lstat(2) and readlink(2) to succeed even when the client can't resolve the symlink target, restoring old behavior.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.15.5
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38431?
CVE-2025-38431 has been rated as a moderate severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-38431?
To fix CVE-2025-38431, users should update their Linux kernel to the latest stable version that includes the patch for this vulnerability.
What impact does CVE-2025-38431 have on Linux systems?
CVE-2025-38431 can lead to failures in backup and copy operations involving symlink targets on affected Linux systems.
Are all versions of the Linux kernel affected by CVE-2025-38431?
Not all versions are affected, but users should verify their specific kernel version against the advisory provided in the patches.
Is there a workaround for CVE-2025-38431?
While there is no official workaround, users can avoid using symlink targets until they apply the necessary updates to mitigate the issue.