PT-2025-35984
CVE-2025-38711
·
Published
2025-06-09
·
Updated
2026-10-18
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A deadlock situation can occur in the SMB/server component when
smb2 create link() is called with the ReplaceIfExists option set and the target file already exists. This happens because ksmbd vfs kern path locked() returns successfully while locking the parent directory, ksmbd vfs remove file() removes the file, and ksmbd vfs link() attempts to lock the same parent directory, resulting in a deadlock.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾