CVE-2025-38321smb: Log an error when close_all_cached_dirs fails
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: smb: Log an error when close_all_cached_dirs fails Under low-memory conditions, close_all_cached_dirs() can't move the dentries to a separate list to dput() them once the locks are dropped. This will result in a "Dentry still in use" error, so add an error message that makes it clear this is what happened: [ 495.281119] CIFS: VFS: \\otters.example.com\share Out of memory while dropping dentries [ 495.281595] ------------[ cut here ]------------ [ 495.281887] BUG: Dentry ffff888115531138{i=78,n=/} still in use (2) [unmount of cifs cifs] [ 495.282391] WARNING: CPU: 1 PID: 2329 at fs/dcache.c:1536 umount_check+0xc8/0xf0 Also, bail out of looping through all tcons as soon as a single allocation fails, since we're already in trouble, and kmalloc() attempts for subseqeuent tcons are likely to fail just like the first one did.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from 73934e535cffbda1490fa97d82690a0f9aa73e94 before b8ced2b9a23a1a2c1e0ed8d0d02512e51bdf38da; 548812afd96982a76a93ba76c0582ea670c40d9e builds before 43f26094d6702e494e800532c3f1606e7a68eb30; from 3fa640d035e5ae526769615c35cb9ed4be6e3662 before 4479db143390bdcadc1561292aab579cdfa9f6c6; from 3fa640d035e5ae526769615c35cb9ed4be6e3662 before a2182743a8b4969481f64aec4908ff162e8a206c; ff4528bbc82d0d90073751f7b49e7b9e9c7e5638; from 6.6.64 before 6.6.95; from 6.12.2 before 6.12.35; from 6.11.11 before 6.12 | CNA record |
linux linux_kernel linux:linux_kernel | before 6.6.95; from 6.7 before 6.12.35; from 6.13 before 6.15.4; 6.16; 6.16 | NVD |
References
- https://git.kernel.org/stable/c/b8ced2b9a23a1a2c1e0ed8d0d02512e51bdf38dapatch
- https://git.kernel.org/stable/c/43f26094d6702e494e800532c3f1606e7a68eb30patch
- https://git.kernel.org/stable/c/4479db143390bdcadc1561292aab579cdfa9f6c6patch
- https://git.kernel.org/stable/c/a2182743a8b4969481f64aec4908ff162e8a206cpatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.