CVE-2025-38737: cifs: Fix oops due to uninitialised variable
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix oops due to uninitialised variable
Fix smb3inittransformrq() to initialise buffer to NULL before calling netfsallocfolioqbuffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38737?
CVE-2025-38737 is considered to have a moderate severity due to the potential for system instability.
How do I fix CVE-2025-38737?
To fix CVE-2025-38737, ensure you update your Linux kernel to the latest patched version provided by your distribution.
What issues does CVE-2025-38737 address?
CVE-2025-38737 addresses an issue with the CIFS module in the Linux kernel where an uninitialized variable can cause a system crash.
Which versions of the Linux kernel are affected by CVE-2025-38737?
CVE-2025-38737 affects all versions of the Linux kernel that do not include the fix for this vulnerability.
Is CVE-2025-38737 remotely exploitable?
CVE-2025-38737 is not directly remotely exploitable but can lead to system crashes under certain conditions.