Wind River Support Network

HomeDefectsLIN1023-10336
Fixed

LIN1023-10336 : Security Advisory - linux - CVE-2025-21660

Created: Jan 21, 2025    Updated: Feb 19, 2025
Resolved Date: Feb 7, 2025
Found In Version: 10.23.30.1
Fix Version: 10.23.30.15
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked

When `ksmbd_vfs_kern_path_locked` met an error and it is not the last
entry, it will exit without restoring changed path buffer. But later this
buffer may be used as the filename for creation.

CREATE(Triage):(User=admin) CVE-2025-21660 (https://nvd.nist.gov/vuln/detail/CVE-2025-21660)

CVEs


Live chat
Online