← CVE Intelligence

CVE-2025-38737

cifs: Fix oops due to uninitialised variable PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected a2906d3316fc19bf0ade84618bb73eab604c447e before 4931fe2dbe1cc0e7d350a4b51b0b330e43971d98; affected a2906d3316fc19bf0ade84618bb73eab604c447e before 6adaa9fae36f848afa7278945d725e197e33c496; affected a2906d3316fc19bf0ade84618bb73eab604c447e before 453a6d2a68e54a483d67233c6e1e24c4095ee4be
Linux / Linuxaffected 6.12; unaffected 0 before 6.12; unaffected 6.12.44 through 6.12.*; unaffected 6.16.4 through 6.16.*; unaffected 6.17 through *

CWE

No CWE identifiers supplied.

References