CVE-2025-38737

CVE-2025-38737 affects the Linux kernel CIFS/smb3 code. The issue is a crash (an oops) caused by an uninitialised variable in smb3_init_transform_rq(), where netfs_alloc_folioq_buffer() is called with an undefined buffer. The fix initialises the buffer to NULL before the call so that netfs starts...

PT-2024-35632

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0 Description A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the crypto aead setkey function. This issue arises when the SMB2 GLOBAL CAP ENCRYPTION flag is set in t...