Medium severity5.5NVD Advisory· Published May 20, 2025· Updated Jun 17, 2026

CVE-2025-37956

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: prevent rename with empty string

Client can send empty newname string to ksmbd server. It will cause a kernel oops from d_alloc. This patch return the error when attempting to rename a file or directory with an empty new name string.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernelllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 5.15
osv-coords
pkg:linux/kernel
Range: >= 5.15.0, < 6.6.91

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/53e3e5babc0963a92d856a5ec0ce92c59f54bc12nvdPatch
git.kernel.org/stable/c/6ee551672c8cf36108b0cfba92ec0c7c28ac3439nvdPatch
git.kernel.org/stable/c/c57301e332cc413fe0a7294a90725f4e21e9549dnvdPatch
git.kernel.org/stable/c/d7f2c00acb1ef64304fd40ac507e9213ff1d9b5cnvdPatch

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000