CVE-2025-37956
ksmbd: prevent rename with empty string
CVE-2025-37956 is fixed in 36 products on 1 platform, first by DEBIAN-CVE-2025-37956, released May 20, 2025. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
5.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0038
32nd percentile
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to ksmbd server. It will cause a kernel oops from d_alloc. This patch return the error when attempting to rename a file or directory with an empty new name string.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| kernel-uek · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-devel · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-devel · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-deprecated · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-deprecated · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-desktop · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-desktop · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra-netfilter · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-extra-netfilter · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-usb · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-usb · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-wireless · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-debug-modules-wireless · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-devel · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-devel · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-doc · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-doc · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-deprecated · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-deprecated · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-desktop · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-desktop · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra-netfilter · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-extra-netfilter · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-usb · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-usb · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-wireless · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-modules-wireless · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-tools · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek-tools · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-devel · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-devel · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-core · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-core · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-deprecated · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-deprecated · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-desktop · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-desktop · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra-netfilter · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-extra-netfilter · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-usb · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-usb · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-wireless · ol 10 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| kernel-uek64k-modules-wireless · ol 9 | 0:6.12.0-101.33.4.3.el9uek | ELSA-2025-20480 | Jul 17, 2025 |
| linux · Debian 13.5 (trixie) | 6.12.29-1 | DEBIAN-CVE-2025-37956 | May 20, 2025 |
| linux · Debian 14 | 6.12.29-1 | DEBIAN-CVE-2025-37956 | May 20, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.