CVE-2025-38737
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
05/09/2025
Last modified:
08/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
cifs: Fix oops due to uninitialised variable<br />
<br />
Fix smb3_init_transform_rq() to initialise buffer to NULL before calling<br />
netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it<br />
is given. Setting it to NULL means it should start a fresh buffer, but the<br />
value is currently undefined.