CVE-2025-38660

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The parse longname() function in the Ceph subsystem does not guarantee a NUL-terminated string when using strrchr(), leading to a potential issue. The function utilizes kmemdup nul() to create a NUL-terminated argument for kstrtou64(), but this NUL-termination is not consistently applied when needed by other functions. The recommended solution is to obtain a NUL-terminated copy of the entire string.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.