CVE detail
CVE-2025-38711
In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_create_link() is called with ReplaceIfExists set and the name does exist then a deadlock will happen. ksmbd_vfs_kern_path_locked() will return with success and the parent directory will be locked. ksmbd_vfs_remove_file() will then remove the file. ksmbd_vfs_link() will then be called while the parent is still locked. It will try to lock the same parent and will deadlock. This patch moves the ksmbd_vfs_kern_path_unlock() call to *before* ksmbd_vfs_link() and then simplifies the code, removing the file_present flag variable.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 23.0 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
9 source links · newest first
- https://cert-portal.siemens.com/productcert/html/ssa-032379.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comSep 4, 2025, 4:15 PM No excerpt available.
Vendor Advisorylists.debian.orgSep 4, 2025, 4:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 4, 2025, 4:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 4, 2025, 4:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 4, 2025, 4:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 4, 2025, 4:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 4, 2025, 4:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 4, 2025, 4:15 PMNo excerpt available.
Exploitgit.kernel.orgSep 4, 2025, 4:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-39885CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive semaphore deadlock in fiemap call syzbot detected a OCFS2 hang due to a recursive semaph…
- CVE-2025-39843CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: mm: slub: avoid wake up kswapd in set_track_prepare set_track_prepare() can incur lock recursion. The issue i…
- CVE-2025-39782CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and jbd2_journal_shrink_ch…
- CVE-2025-39773CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() When set multicast_query_interval to a large val…
- CVE-2025-39736CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock When netpoll is enabled, calling pr_war…
- CVE-2025-38650CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: hfsplus: remove mutex_lock check in hfsplus_free_extents Syzbot reported an issue in hfsplus filesystem: ---…