Linux Kernel Vulnerability in SMB3 Affecting CIFS Protocol

CVE-2025-38728

What is CVE-2025-38728?

A vulnerability in the Linux kernel's SMB3 implementation has been identified, allowing for a slab out of bounds access during the mounting process with ksmbd. This issue arises from missing checks within the parse_server_interfaces function. If left unaddressed, it can potentially lead to serious memory safety issues, compromising the stability and security of systems utilizing this kernel version. It is crucial for users and administrators to apply appropriate patches to mitigate risks associated with this vulnerability.

References