In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix unexpectedly changed path in ksmbdvfskernpathlocked
When ksmbd_vfs_kern_path_locked met an error and it is not the last
entry, it will exit without restoring changed path buffer. But later this
buffer may be used as the filename for creation.
[
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "fs/smb/server/vfs.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13e41c58c74baa71f34c0830eaa3c29d53a6e964",
"digest": {
"line_hashes": [
"184741398683405531404927328148916777247",
"284174130918790273684668915785329082744",
"78700902182092399761698528372160350002",
"246262956469055430958249262808152843801",
"220074332557247525980758744415760481238",
"315229617471227768665749969955089578146",
"288051780292742692199024889193359411848",
"35026392052644812566025102753162844799"
],
"threshold": 0.9
},
"id": "CVE-2025-21660-1735f629"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "fs/smb/server/vfs.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ac538e40278a2c0c051cca81bcaafc547d61372",
"digest": {
"line_hashes": [
"184741398683405531404927328148916777247",
"284174130918790273684668915785329082744",
"78700902182092399761698528372160350002",
"246262956469055430958249262808152843801",
"220074332557247525980758744415760481238",
"315229617471227768665749969955089578146",
"288051780292742692199024889193359411848",
"35026392052644812566025102753162844799"
],
"threshold": 0.9
},
"id": "CVE-2025-21660-20afc625"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "fs/smb/server/vfs.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65b31b9d992c0fb0685c51a0cf09993832734fc4",
"digest": {
"line_hashes": [
"184741398683405531404927328148916777247",
"284174130918790273684668915785329082744",
"78700902182092399761698528372160350002",
"246262956469055430958249262808152843801",
"220074332557247525980758744415760481238",
"315229617471227768665749969955089578146",
"288051780292742692199024889193359411848",
"35026392052644812566025102753162844799"
],
"threshold": 0.9
},
"id": "CVE-2025-21660-6dc420ce"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "fs/smb/server/vfs.c",
"function": "ksmbd_vfs_kern_path_locked"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ac538e40278a2c0c051cca81bcaafc547d61372",
"digest": {
"length": 1208.0,
"function_hash": "39645006240666890798473635132273010485"
},
"id": "CVE-2025-21660-84912291"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "fs/smb/server/vfs.c",
"function": "ksmbd_vfs_kern_path_locked"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13e41c58c74baa71f34c0830eaa3c29d53a6e964",
"digest": {
"length": 1208.0,
"function_hash": "39645006240666890798473635132273010485"
},
"id": "CVE-2025-21660-85829b70"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "fs/smb/server/vfs.c",
"function": "ksmbd_vfs_kern_path_locked"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51669f4af5f7959565b48e55691ba92fabf5c587",
"digest": {
"length": 1208.0,
"function_hash": "39645006240666890798473635132273010485"
},
"id": "CVE-2025-21660-8ed538c4"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "fs/smb/server/vfs.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51669f4af5f7959565b48e55691ba92fabf5c587",
"digest": {
"line_hashes": [
"184741398683405531404927328148916777247",
"284174130918790273684668915785329082744",
"78700902182092399761698528372160350002",
"246262956469055430958249262808152843801",
"220074332557247525980758744415760481238",
"315229617471227768665749969955089578146",
"288051780292742692199024889193359411848",
"35026392052644812566025102753162844799"
],
"threshold": 0.9
},
"id": "CVE-2025-21660-9705e424"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "fs/smb/server/vfs.c",
"function": "ksmbd_vfs_kern_path_locked"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65b31b9d992c0fb0685c51a0cf09993832734fc4",
"digest": {
"length": 1208.0,
"function_hash": "39645006240666890798473635132273010485"
},
"id": "CVE-2025-21660-b7655431"
}
]