VULNERABILITY INTELLIGENCE
CVE-2025-38737
CVSS score9.8 CRITICAL
EPSS probability0.38%
CISA KEVNot currently listed
Published2025-09-05
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.
Weakness classification
- nvd@nist.gov: CWE-908