CVE-2025-21660

MEDIUM

Linux Kernel Path Traversal via ksmbd_vfs_kern_path_locked

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked When `ksmbd_vfs_kern_path_locked` met an error and it is not the last entry, it will exit without restoring changed path buffer. But later this buffer may be used as the filename for creation.

References (5)

Core 5

Scores

CVSS v3 5.5
EPSS 0.0020
EPSS Percentile 9.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (21)
linux/Kernel < 6.1.125linux
linux/Kernel 6.2.0 - 6.6.72linux
linux/Kernel 6.7.0 - 6.12.10linux
Linux/Linux < 6.12
Linux/Linux 6.1.113 - 6.1.125
Linux/Linux 6.1.125 - 6.1.*
Linux/Linux 6.10.13 - 6.11
Linux/Linux 6.11.2 - 6.12
Linux/Linux 6.12
Linux/Linux 6.12.10 - 6.12.*
... and 11 more
Published Jan 21, 2025
Tracked Since Feb 18, 2026