Linux Kernel Vulnerability in SMB2 Reconnection Process

CVE-2025-38379

What is CVE-2025-38379?

The Linux kernel exhibits a vulnerability within the SMB2 reconnection process that occurs during the execution of the smb2_reconnect_server() function. A dummy transport connection (tcon) is erroneously passed with an uninitialized ->query_interface parameter to smb2_reconnect(). This oversight hinders the system’s ability to properly schedule delayed work, leading to potential warnings and inefficiencies in operation. To mitigate this, a fix has been implemented ensuring that the queueing for delayed work is conducted from the correct transport connection, thus enhancing the overall reliability and stability of server reconnections.

References