linux-cve-announce - CVE-2025-37775: ksmbd: fix the warning from __kernel_write

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <2025050115-CVE-2025-37775-296d@gregkh>
Date: Thu,  1 May 2025 15:07:23 +0200
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: linux-cve-announce@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...nel.org>
Subject: CVE-2025-37775: ksmbd: fix the warning from __kernel_write_iter

From: Greg Kroah-Hartman <gregkh@...nel.org>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix the warning from __kernel_write_iter

[ 2110.972290] ------------[ cut here ]------------
[ 2110.972301] WARNING: CPU: 3 PID: 735 at fs/read_write.c:599 __kernel_write_iter+0x21b/0x280

This patch doesn't allow writing to directory.

The Linux kernel CVE team has assigned CVE-2025-37775 to this issue.


Affected and fixed versions
===========================

	Fixed in 6.1.135 with commit 44079e544c9f6e3e9fb43a16ddf8b08cf686d657
	Fixed in 6.6.88 with commit b7ce8db490286c2e009758fa1416d66aeb333614
	Fixed in 6.12.25 with commit 2a879da5c34a1e5d971e815d5b30f27eb6d69efc
	Fixed in 6.14.4 with commit 1ed343481ba6911178bc5ca7a51be319eafcc747
	Fixed in 6.15-rc3 with commit b37f2f332b40ad1c27f18682a495850f2f04db0a

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2025-37775
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	fs/smb/server/vfs.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/44079e544c9f6e3e9fb43a16ddf8b08cf686d657
	https://git.kernel.org/stable/c/b7ce8db490286c2e009758fa1416d66aeb333614
	https://git.kernel.org/stable/c/2a879da5c34a1e5d971e815d5b30f27eb6d69efc
	https://git.kernel.org/stable/c/1ed343481ba6911178bc5ca7a51be319eafcc747
	https://git.kernel.org/stable/c/b37f2f332b40ad1c27f18682a495850f2f04db0a