PT-2025-33566 · Linux+4 · Linux Kernel+4

Published 2025-06-25 · Updated 2026-03-23 · CVE-2025-38523

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The handling of received data in the smbdirect client code uses copy to iter() to copy data from the smbd response struct's packet trailer to a folioq buffer. When CONFIG HARDENED USERCOPY=y, this can cause checks in copy to iter() to fail, resulting in a kernel BUG. The issue occurs because the smbd response slab's packet field is not marked as permitted for usercopy. The fix involves modifying kmem slab create() to allow copy to iter() from the packet region of the smbd response slab objects.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1188

Related Identifiers

ALSA-2025:16904

BDU:2025-15164

CVE-2025-38523

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 230

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38523.json · Exploit
• https://ubuntu.com/security/CVE-2025-38391 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38408 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7834-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38340 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38523 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38246 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38334 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38087 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38405 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7856-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f0dd353d47f7051afa98c6c60c7486831eb1a410 · Patch
• https://ubuntu.com/security/CVE-2025-38385 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7833-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38406 · Vendor Advisory