{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"37166d63e42c34846a16001950ecec96229a8d17","status":"affected","version":"d5a863a153e90996ab2aef6b9e08d509f4d5662b","versionType":"git"},{"lessThan":"a9e916fa5c7d0ec2256aa44aa24ddd92f529ce35","status":"affected","version":"d5a863a153e90996ab2aef6b9e08d509f4d5662b","versionType":"git"},{"lessThan":"cce8e71ca1f7ad9045707f0d22490c1e9ed1df6c","status":"affected","version":"d5a863a153e90996ab2aef6b9e08d509f4d5662b","versionType":"git"},{"lessThan":"f1e7a277a1736e12cc4bd6d93b8a5c439b8ca20c","status":"affected","version":"d5a863a153e90996ab2aef6b9e08d509f4d5662b","versionType":"git"},{"status":"affected","version":"e91802036b3e6e6e803a17ddf5783a6354fe5380","versionType":"git"},{"lessThan":"6.3","status":"affected","version":"6.2.13","versionType":"semver"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.3"},{"lessThan":"6.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.95","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.35","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2025-38208","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: add NULL check in automount_fullpath\n\npage is checked for null in __build_path_from_dentry_optional_prefix\nwhen tcon->origin_fullpath is not set. However, the check is missing when\nit is set.\nAdd a check to prevent a potential NULL pointer dereference.","epss":{"date":"2026-11-05","percentile":0.07413,"score":0.00178},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793911940689,"publishedAt":1751636248226,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/37166d63e42c34846a16001950ecec96229a8d17"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a9e916fa5c7d0ec2256aa44aa24ddd92f529ce35"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/cce8e71ca1f7ad9045707f0d22490c1e9ed1df6c"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/f1e7a277a1736e12cc4bd6d93b8a5c439b8ca20c"}],"remediation":[],"revision":"7ff31a7ec9304fa381aa584a37e6963bd754a9400ba796eef23755b3e9e34bf7","sources":[{"modifiedAt":1793911940689,"name":"CNA: Linux","retrievedAt":1793913614845,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38208"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913636038,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38208"}],"ssvc":{"assessedAt":1793911885835,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"smb: client: add NULL check in automount_fullpath","updatedAt":1793913636038}