← Volver a CVEs

CVE-2025-21660

MEDIUM

5.5

Descripcion

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked When `ksmbd_vfs_kern_path_locked` met an error and it is not the last entry, it will exit without restoring changed path buffer. But later this buffer may be used as the filename for creation.

Detalles CVE

Puntuacion CVSS v3.15.5

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado1/21/2025

Ultima modificacion11/3/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

linux:linux_kernel

Referencias

https://git.kernel.org/stable/c/13e41c58c74baa71f34c0830eaa3c29d53a6e964(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/2ac538e40278a2c0c051cca81bcaafc547d61372(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/51669f4af5f7959565b48e55691ba92fabf5c587(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/65b31b9d992c0fb0685c51a0cf09993832734fc4(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.