Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding I/O to complete as well as marking all existing open handles as deleted to prevent them from deferring closes, which increases the race window for potential concurrent opens on the target file. Fix this by unhashing the dentry in advance to prevent any concurrent opens on the target.

INFO

Published Date :

2025-09-16T13:00:23.897Z

Last Modified :

2026-01-02T15:32:35.968Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-39825 vulnerability.

Vendors Products
Debian
  • Debian Linux
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-39825.

URL Resource
https://git.kernel.org/stable/c/24b9ed739c8c5b464d983e12cf308982f3ae93c2 cve-icon cve-icon
https://git.kernel.org/stable/c/289f945acb20b9b54fe4d13895e44aa58965ddb2 cve-icon cve-icon
https://git.kernel.org/stable/c/c9991af5e09924f6f3b3e6996a5e09f9504b4358 cve-icon cve-icon
https://git.kernel.org/stable/c/c9e7de284da0be5b44dbe79d71573f9f7f9b144c cve-icon cve-icon
https://git.kernel.org/stable/c/d84291fc7453df7881a970716f8256273aca5747 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html cve-icon
https://lore.kernel.org/linux-cve-announce/2025091616-CVE-2025-39825-8a7a@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-39825 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-39825 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact