← Voltar para CVEs

CVE-2025-21660

MEDIUM

5.5

Descricao

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked When `ksmbd_vfs_kern_path_locked` met an error and it is not the last entry, it will exit without restoring changed path buffer. But later this buffer may be used as the filename for creation.

Detalhes CVE

Pontuacao CVSS v3.15.5

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado1/21/2025

Ultima modificacao11/3/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

linux:linux_kernel

Referencias

https://git.kernel.org/stable/c/13e41c58c74baa71f34c0830eaa3c29d53a6e964(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/2ac538e40278a2c0c051cca81bcaafc547d61372(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/51669f4af5f7959565b48e55691ba92fabf5c587(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/65b31b9d992c0fb0685c51a0cf09993832734fc4(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.