CVE-2025-38208

page is checked for null in __build_path_from_dentry_optional_prefix when tcon->origin_fullpath is not set. However, the check is missing when it is set. Add a check to prevent a potential NULL pointer dereference.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38208.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

d5a863a153e90996ab2aef6b9e08d509f4d5662b

Fixed

37166d63e42c34846a16001950ecec96229a8d17

Fixed

a9e916fa5c7d0ec2256aa44aa24ddd92f529ce35

Fixed

cce8e71ca1f7ad9045707f0d22490c1e9ed1df6c

Fixed

f1e7a277a1736e12cc4bd6d93b8a5c439b8ca20c

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.2.13

Fixed

6.3

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

e91802036b3e6e6e803a17ddf5783a6354fe5380

Affected versions

v6.*

v6.2.13

v6.2.14

v6.2.15

v6.2.16

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38208.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.3.0

Fixed

6.6.95

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.35

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.15.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38208.json"