PT-2025-30779 · Linux · Linux Kernel

Published 2025-07-25 · Updated 2026-03-24 · CVE-2025-38379

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 6.16.0-rc3 and earlier

Description A warning occurred when reconnecting a channel in the SMB2 protocol. Specifically, a dummy tcon was passed to smb2 reconnect() with an uninitialized query interface, leading to an issue when attempting to queue a delayed work item on it. This was observed during reconnection attempts within the cifsiod workqueue.

Recommendations Linux Kernel versions prior to 6.16.0-rc3 should be updated.

Exploit

Fix

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

AZL-65780

BDU:2025-10788

CVE-2025-38379

MGASA-2025-0218

MGASA-2025-0219

OPENSUSE-SU-2026:20287-1

SUSE-SU-2026:0447-1

SUSE-SU-2026:0471-1

SUSE-SU-2026:0472-1

SUSE-SU-2026:0587-1

SUSE-SU-2026:20477-1

SUSE-SU-2026:20498-1

SUSE-SU-2026:20555-1

SUSE-SU-2026:20599-1

SUSE-SU-2026:20615-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

Affected Products

Linux Kernel

References · 1622

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38379.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2026:20555-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0218 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0587-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20845-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20876-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0219.html · Security Note
• https://git.kernel.org/stable/c/0cee638d92ac898d73eccc4e4bab70e9fc95946a · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-38379 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20498-1 · Vendor Advisory
• https://git.kernel.org/stable/c/3f6932ef25378794894c3c1024092ad14da2d330 · Patch
• https://ubuntu.com/security/CVE-2025-38379 · Vendor Advisory
• https://git.kernel.org/stable/c/9d2b629a9dc5c72537645533af1cb11a7d34c4b1 · Patch
• https://git.kernel.org/stable/c/3bbe46716092d8ef6b0df4b956f585c5cd0fc78e · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:0471-1 · Vendor Advisory