{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"6ddaf7567080c7de2e0c99efca2ee1e6b79beea5","status":"affected","version":"12b466eb52d926802b6898d2cb7e67386467f54a","versionType":"git"},{"lessThan":"ff8abbd248c1f52df0c321690b88454b13ff54b2","status":"affected","version":"12b466eb52d926802b6898d2cb7e67386467f54a","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.14"},{"lessThan":"6.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2025-38431","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix regression with native SMB symlinks\n\nSome users and customers reported that their backup/copy tools started\nto fail when the directory being copied contained symlink targets that\nthe client couldn't parse - even when those symlinks weren't followed.\n\nFix this by allowing lstat(2) and readlink(2) to succeed even when the\nclient can't resolve the symlink target, restoring old behavior.","epss":{"date":"2026-11-05","percentile":0.05136,"score":0.00159},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793912557632,"publishedAt":1753453354363,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/6ddaf7567080c7de2e0c99efca2ee1e6b79beea5"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ff8abbd248c1f52df0c321690b88454b13ff54b2"}],"remediation":[],"revision":"a7d7135d635d9df6acde3e237bc604b46e64e6863d74563030ca825a6fb13e97","sources":[{"modifiedAt":1793912557632,"name":"CNA: Linux","retrievedAt":1793913695294,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38431"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913703780,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38431"}],"ssvc":{"assessedAt":1793912189260,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"smb: client: fix regression with native SMB symlinks","updatedAt":1793913703780}