Null Pointer Dereference in Linux Kernel SMB Client Component

CVE-2025-38208

What is CVE-2025-38208?

A vulnerability exists in the Linux kernel's SMB client component, where a null pointer dereference could occur due to a missing check when tcon->origin_fullpath is set. This oversight can potentially lead to application crashes or unexpected behavior. Addressing this issue requires a patch that incorporates a null check, thereby enhancing the robustness of the SMB client functionality.

References