Description
In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call cifs_server_dbg() implies server to be non-NULL so move call under condition to avoid NULL pointer dereference. Found by Linux Verification Center (linuxtesting.org) with SVACE.
References (10)
Core 10
Core References
Scores
CVSS v3
5.5
EPSS
0.0007
EPSS Percentile
20.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (29)
debian/debian_linux
11.0
linux/Kernel
5.11.0 - 5.15.181linux
linux/Kernel
5.16.0 - 6.1.135linux
linux/Kernel
5.7.0 - 5.10.237linux
linux/Kernel
6.13.0 - 6.13.12linux
linux/Kernel
6.14.0 - 6.14.3linux
linux/Kernel
6.2.0 - 6.6.88linux
linux/Kernel
6.7.0 - 6.12.24linux
Linux/Linux
< 5.7
Linux/Linux
5.10.237 - 5.10.*
... and 19 more
Published
May 09, 2025
Tracked Since
Feb 18, 2026