CVE-2025-21660

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked When `ksmbd_vfs_kern_path_locked` met an error and it is not the last entry, it will exit without restoring changed path buffer. But later this buffer may be used as the filename for creation.

Score

CVSS 3.1 5.5 Medium

Status

Modified - 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2025-01-21

Last modified

2026-05-23

Affected products

• Linux Kernel (Linux)

References

• https://git.kernel.org/stable/c/13e41c58c74baa71f34c0830eaa3c29d53a6e964
• https://git.kernel.org/stable/c/2ac538e40278a2c0c051cca81bcaafc547d61372
• https://git.kernel.org/stable/c/51669f4af5f7959565b48e55691ba92fabf5c587
• https://git.kernel.org/stable/c/65b31b9d992c0fb0685c51a0cf09993832734fc4
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html