Unrated severityNVD Advisory· Published Aug 22, 2025· Updated Sep 29, 2025
[ceph] parse_longname(): strrchr() expects NUL-terminated string
CVE-2025-38660
Description
In the Linux kernel, the following vulnerability has been resolved:
[ceph] parse_longname(): strrchr() expects NUL-terminated string
... and parse_longname() is not guaranteed that. That's the reason why it uses kmemdup_nul() to build the argument for kstrtou64(); the problem is, kstrtou64() is not the only thing that need it.
Just get a NUL-terminated copy of the entire thing and be done with that...
Affected products
2- Linux/Linuxv5Range: 6.6
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.