PT-2025-35984 · Linux+5 · Linux Kernel+5

Published

2025-06-09

·

Updated

2026-04-20

·

CVE-2025-38711

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A deadlock situation can occur in the SMB/server component when smb2 create link() is called with the ReplaceIfExists option set and the target file already exists. This happens because ksmbd vfs kern path locked() returns successfully while locking the parent directory, ksmbd vfs remove file() removes the file, and ksmbd vfs link() attempts to lock the same parent directory, resulting in a deadlock.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-833CWE-667

Related Identifiers

AZL-66872
BDU:2025-15027
CVE-2025-38711
DLA-4328-1
DSA-6009-1
ECHO-4880-179F-C8A9
MGASA-2025-0234
MGASA-2025-0235
USN-7909-1
USN-7909-2
USN-7909-3
USN-7909-4
USN-7909-5
USN-7910-1
USN-7910-2
USN-7933-1
USN-7938-1
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Affected Products

Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu