AZL-66872
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66872.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-66872
- Upstream
- Published
- 2025-09-04T16:15:40Z
- Modified
- 2026-04-01T05:21:04.284279Z
- Summary
- CVE-2025-38711 affecting package kernel for versions less than 6.6.104.2-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
smb/server: avoid deadlock when linking with ReplaceIfExists
If smb2createlink() is called with ReplaceIfExists set and the name does exist then a deadlock will happen.
ksmbdvfskernpathlocked() will return with success and the parent directory will be locked. ksmbdvfsremovefile() will then remove the file. ksmbdvfs_link() will then be called while the parent is still locked. It will try to lock the same parent and will deadlock.
This patch moves the ksmbdvfskernpathunlock() call to before ksmbdvfslink() and then simplifies the code, removing the file_present flag variable.
- References