Vulnerability in Linux Kernel's ksmbd Component

CVE-2025-38092

What is CVE-2025-38092?

A vulnerability exists in the Linux kernel related to the ksmbd component, where the macro list_first_entry() fails to return NULL when the list is empty. Instead, it may return an invalid pointer, which can lead to security issues during operations that depend on list traversal. The resolution involves using list_first_entry_or_null() to properly validate the list state before accessing its elements, ensuring that any empty lists are handled safely.

References