CVE-2025-38431

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix regression with native SMB symlinks Some users and customers reported that their backup/copy tools started to fail when the directory being copied contained symlink targets that the client couldn't parse - even when those symlinks weren't followed. Fix this by allowing lstat(2) and readlink(2) to succeed even when the client can't resolve the symlink target, restoring old behavior.

Reserved 2025-04-16 | Published 2025-07-25 | Updated 2025-07-25 | Assigner Linux

Product status

Default status
unaffected

12b466eb52d926802b6898d2cb7e67386467f54a before 6ddaf7567080c7de2e0c99efca2ee1e6b79beea5
affected

12b466eb52d926802b6898d2cb7e67386467f54a before ff8abbd248c1f52df0c321690b88454b13ff54b2
affected

Default status
affected

6.14
affected

Any version before 6.14
unaffected

6.15.5
unaffected

6.16-rc4
unaffected

References

git.kernel.org/...c/6ddaf7567080c7de2e0c99efca2ee1e6b79beea5

git.kernel.org/...c/ff8abbd248c1f52df0c321690b88454b13ff54b2

cve.org (CVE-2025-38431)

nvd.nist.gov (CVE-2025-38431)

Download JSON