CVE-2025-21660 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked When `ksmbd_vfs_kern_path_locked` met an error and it is not the last entry, it will exit without restoring changed path buffer. But later this buffer may be used as the filename for creation.
A vulnerability in the Linux kernel's ksmbd component was introduced in version 6.1.0-rc1. The issue arises in the 'ksmbd_vfs_kern_path_locked' function, where an error can cause the function to exit prematurely without restoring the original path buffer. This unaddressed change can lead to incorrect path information being used, potentially allowing for unintended file operations.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.1.113, < 6.1.125 >= 6.6.54, < 6.6.72 >= 6.10.13, < 6.11 >= 6.11.2, < 6.12.10 6.13 rc1 6.13 rc2 6.13 rc3 6.13 rc4 6.13 rc5 6.13 rc6 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 3, 2025 | CVE Modified | CVE |
| Oct 15, 2025 | Initial Analysis | [email protected] |
| Jan 21, 2025 | New CVE Received | kernel.org |