CVE-2025-37956 ksmbd: prevent rename with empty string
A remote attacker can cause a kernel crash in the ksmbd server by sending a rename request with an empty string, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-37956?
CVE-2025-37956 is a high-severity vulnerability in Linux kernel, published on 20 May 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: prevent rename with empty string
Client can send empty newname string to ksmbd server. It will cause a kernel oops from d_alloc. This patch return the error when attempting to rename a file or directory with an empty new name string.
Which versions are affected by CVE-2025-37956?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-37956?
Apply the vendor's patch.
Is CVE-2025-37956 being exploited?
There is no known exploitation of CVE-2025-37956 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-37956, DEBIAN-CVE-2025-37956, GHSA-pg93-c2vw-fqj3, ROOT-OS-DEBIAN-12-CVE-2025-37956, ROOT-OS-UBUNTU-2204-CVE-2025-37956, ROOT-OS-UBUNTU-2404-CVE-2025-37956 and 1 more.