CVE-2025-38321
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/07/2025
Last modified:
18/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
smb: Log an error when close_all_cached_dirs fails<br />
<br />
Under low-memory conditions, close_all_cached_dirs() can&#39;t move the<br />
dentries to a separate list to dput() them once the locks are dropped.<br />
This will result in a "Dentry still in use" error, so add an error<br />
message that makes it clear this is what happened:<br />
<br />
[ 495.281119] CIFS: VFS: \\otters.example.com\share Out of memory while dropping dentries<br />
[ 495.281595] ------------[ cut here ]------------<br />
[ 495.281887] BUG: Dentry ffff888115531138{i=78,n=/} still in use (2) [unmount of cifs cifs]<br />
[ 495.282391] WARNING: CPU: 1 PID: 2329 at fs/dcache.c:1536 umount_check+0xc8/0xf0<br />
<br />
Also, bail out of looping through all tcons as soon as a single<br />
allocation fails, since we&#39;re already in trouble, and kmalloc() attempts<br />
for subseqeuent tcons are likely to fail just like the first one did.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.6.95 (excluding) | |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.12.35 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.15.4 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



