PT-2025-35984

CVE-2025-38711

·

Published

2025-06-09

·

Updated

2026-10-18

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A deadlock situation can occur in the SMB/server component when smb2 create link() is called with the ReplaceIfExists option set and the target file already exists. This happens because ksmbd vfs kern path locked() returns successfully while locking the parent directory, ksmbd vfs remove file() removes the file, and ksmbd vfs link() attempts to lock the same parent directory, resulting in a deadlock.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
AZL-66872
DLA-4328-1
DSA-6009-1
ECHO-4880-179F-C8A9
MGASA-2025-0234
MGASA-2025-0235
USN-7909-1
USN-7909-2
USN-7909-3
USN-7909-4
USN-7909-5
USN-7910-1
USN-7910-2
USN-7933-1
USN-7938-1
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1
Found an issue in the description? Have something to add? Feel free to write us 👾