In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix race with concurrent opens in rename(2)
Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding I/O to complete as well as marking all existing open handles as deleted to prevent them from deferring closes, which increases the race window for potential concurrent opens on the target file.
Fix this by unhashing the dentry in advance to prevent any concurrent opens on the target.
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "13999959745881772231518487954731229996",
"length": 2340.0
},
"signature_type": "Function",
"id": "CVE-2025-39825-16fadb5b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@289f945acb20b9b54fe4d13895e44aa58965ddb2",
"target": {
"function": "cifs_rename2",
"file": "fs/smb/client/inode.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "13999959745881772231518487954731229996",
"length": 2340.0
},
"signature_type": "Function",
"id": "CVE-2025-39825-34184b14",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9991af5e09924f6f3b3e6996a5e09f9504b4358",
"target": {
"function": "cifs_rename2",
"file": "fs/smb/client/inode.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "136591907068580858015190157236898197275",
"length": 2302.0
},
"signature_type": "Function",
"id": "CVE-2025-39825-354b9c75",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24b9ed739c8c5b464d983e12cf308982f3ae93c2",
"target": {
"function": "cifs_rename2",
"file": "fs/smb/client/inode.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"218026563381919829333816832044005103581",
"339722081840992321139663400364065111785",
"253133588191385358509124595475524779577",
"146598890772201731227827085821537135048",
"101832084992230366250346054800287684357",
"185463079618909164682044336544090276693",
"180384808215544690466310773108394418967",
"261121485043722447136572619862010087187",
"202433169981855449219996559198553476507",
"261364263268799526880726269824297962963",
"76430733138562641037555343010614886820",
"33245076932888018917313305755762941751",
"123425879851260885245694592825452724403",
"38645946014233196637070104029271056",
"93704622825546663581349931645012713034",
"42605585642124775665471528976502908808",
"125268297419614080504211824800930897406",
"147688313306933298893834736140850795135"
]
},
"signature_type": "Line",
"id": "CVE-2025-39825-3e849352",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9e7de284da0be5b44dbe79d71573f9f7f9b144c",
"target": {
"file": "fs/smb/client/inode.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"218026563381919829333816832044005103581",
"339722081840992321139663400364065111785",
"253133588191385358509124595475524779577",
"146598890772201731227827085821537135048",
"101832084992230366250346054800287684357",
"185463079618909164682044336544090276693",
"180384808215544690466310773108394418967",
"261121485043722447136572619862010087187",
"202433169981855449219996559198553476507",
"261364263268799526880726269824297962963",
"76430733138562641037555343010614886820",
"33245076932888018917313305755762941751",
"123425879851260885245694592825452724403",
"36314136414400320768641561783138513894",
"317134283487301720537591495394377858394",
"262298720609113105852893039066519657134",
"147688313306933298893834736140850795135"
]
},
"signature_type": "Line",
"id": "CVE-2025-39825-44755609",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9991af5e09924f6f3b3e6996a5e09f9504b4358",
"target": {
"file": "fs/smb/client/inode.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"218026563381919829333816832044005103581",
"339722081840992321139663400364065111785",
"253133588191385358509124595475524779577",
"146598890772201731227827085821537135048",
"101832084992230366250346054800287684357",
"185463079618909164682044336544090276693",
"180384808215544690466310773108394418967",
"261121485043722447136572619862010087187",
"202433169981855449219996559198553476507",
"261364263268799526880726269824297962963",
"76430733138562641037555343010614886820",
"33245076932888018917313305755762941751",
"123425879851260885245694592825452724403",
"36314136414400320768641561783138513894",
"317134283487301720537591495394377858394",
"262298720609113105852893039066519657134",
"147688313306933298893834736140850795135"
]
},
"signature_type": "Line",
"id": "CVE-2025-39825-5ce0fd41",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@289f945acb20b9b54fe4d13895e44aa58965ddb2",
"target": {
"file": "fs/smb/client/inode.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "13999959745881772231518487954731229996",
"length": 2340.0
},
"signature_type": "Function",
"id": "CVE-2025-39825-7e01d84a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d84291fc7453df7881a970716f8256273aca5747",
"target": {
"function": "cifs_rename2",
"file": "fs/smb/client/inode.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"218026563381919829333816832044005103581",
"339722081840992321139663400364065111785",
"253133588191385358509124595475524779577",
"146598890772201731227827085821537135048",
"101832084992230366250346054800287684357",
"185463079618909164682044336544090276693",
"180384808215544690466310773108394418967",
"261121485043722447136572619862010087187",
"202433169981855449219996559198553476507",
"261364263268799526880726269824297962963",
"76430733138562641037555343010614886820",
"33245076932888018917313305755762941751",
"123425879851260885245694592825452724403",
"36314136414400320768641561783138513894",
"317134283487301720537591495394377858394",
"262298720609113105852893039066519657134",
"147688313306933298893834736140850795135"
]
},
"signature_type": "Line",
"id": "CVE-2025-39825-8aa37f2d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d84291fc7453df7881a970716f8256273aca5747",
"target": {
"file": "fs/smb/client/inode.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"218026563381919829333816832044005103581",
"339722081840992321139663400364065111785",
"253133588191385358509124595475524779577",
"146598890772201731227827085821537135048",
"101832084992230366250346054800287684357",
"185463079618909164682044336544090276693",
"180384808215544690466310773108394418967",
"261121485043722447136572619862010087187",
"202433169981855449219996559198553476507",
"261364263268799526880726269824297962963",
"76430733138562641037555343010614886820",
"33245076932888018917313305755762941751",
"123425879851260885245694592825452724403",
"36314136414400320768641561783138513894",
"317134283487301720537591495394377858394",
"262298720609113105852893039066519657134",
"147688313306933298893834736140850795135"
]
},
"signature_type": "Line",
"id": "CVE-2025-39825-99c801b8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24b9ed739c8c5b464d983e12cf308982f3ae93c2",
"target": {
"file": "fs/smb/client/inode.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "69388737582816034116879679932783570338",
"length": 2399.0
},
"signature_type": "Function",
"id": "CVE-2025-39825-e9b0827c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9e7de284da0be5b44dbe79d71573f9f7f9b144c",
"target": {
"function": "cifs_rename2",
"file": "fs/smb/client/inode.c"
}
}
]