CVE-2025-37956

MEDIUM

Linux Kernel 5.15-6.6.90, 6.7.0-6.12.28, 6.13.0-6.14.6 - Denial of Service via Empty Newname String in ksmbd Rename

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to ksmbd server. It will cause a kernel oops from d_alloc. This patch return the error when attempting to rename a file or directory with an empty new name string.

References (4)

Core 4

Core References

Patch

https://git.kernel.org/stable/c/6ee551672c8cf36108b0cfba92ec0c7c28ac3439

Patch

https://git.kernel.org/stable/c/c57301e332cc413fe0a7294a90725f4e21e9549d

Patch

https://git.kernel.org/stable/c/d7f2c00acb1ef64304fd40ac507e9213ff1d9b5c

Patch

https://git.kernel.org/stable/c/53e3e5babc0963a92d856a5ec0ce92c59f54bc12

Scores

CVSS v3 5.5

EPSS 0.0015

EPSS Percentile 5.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (15)

linux/Kernel 5.15.0 - 6.6.91linux

linux/Kernel 6.13.0 - 6.14.7linux

linux/Kernel 6.7.0 - 6.12.29linux

Linux/Linux < 5.15

Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - 53e3e5babc0963a92d856a5ec0ce92c59f54bc12

Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - 6ee551672c8cf36108b0cfba92ec0c7c28ac3439

Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - c57301e332cc413fe0a7294a90725f4e21e9549d

Linux/Linux 0626e6641f6b467447c81dd7678a69c66f7746cf - d7f2c00acb1ef64304fd40ac507e9213ff1d9b5c

Linux/Linux 5.15

Linux/Linux 6.12.29 - 6.12.*

... and 5 more

Published May 20, 2025

Tracked Since Feb 18, 2026