DEBIAN-CVE-2025-38737

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3inittransformrq to initialise buffer to NULL before calling netfsallocfolioqbuffer as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should...

UBUNTU-CVE-2025-38737

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3inittransformrq to initialise buffer to NULL before calling netfsallocfolioqbuffer as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should...

CVE-2025-38737

CVE-2025-38737 affects the Linux kernel CIFS implementation. The issue is an oops caused by an uninitialised variable in smb3_init_transform_rq(), where the buffer used by netfs_alloc_folioq_buffer() could be read/modified unexpectedly. The fix initializes the buffer to NULL before calling netfs_...