CVE-2025-39825: smb: client: fix race with concurrent opens in rename(2)
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix race with concurrent opens in rename(2)
Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding I/O to complete as well as marking all existing open handles as deleted to prevent them from deferring closes, which increases the race window for potential concurrent opens on the target file.
Fix this by unhashing the dentry in advance to prevent any concurrent opens on the target.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39825?
The severity of CVE-2025-39825 is currently assessed as high due to the potential impact on file operations.
How do I fix CVE-2025-39825?
To fix CVE-2025-39825, ensure that your system is updated with the latest version of the affected Linux kernel.
Which software is affected by CVE-2025-39825?
CVE-2025-39825 affects the Microsoft azl3 kernel version 6.6.96.2-2.
What type of vulnerability is CVE-2025-39825?
CVE-2025-39825 is a race condition vulnerability that occurs during concurrent file renaming operations in the Linux kernel.
When was CVE-2025-39825 resolved?
CVE-2025-39825 was resolved in a recent patch release addressing the concurrent opening issues.