CVE-2025-38523

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The handling of received data in the smbdirect client code uses copy to iter() to copy data from the smbd response struct's packet trailer to a folioq buffer. When CONFIG HARDENED USERCOPY=y, this can cause checks in copy to iter() to fail, resulting in a kernel BUG. The issue occurs because the smbd response slab's packet field is not marked as permitted for usercopy. The fix involves modifying kmem slab create() to allow copy to iter() from the packet region of the smbd response slab objects.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.