First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-37775

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix the warning from __kernel_write_iter

[ 2110.972290] ------------[ cut here ]------------ [ 2110.972301] WARNING: CPU: 3 PID: 735 at fs/read_write.c:599 __kernel_write_iter+0x21b/0x280

This patch doesn't allow writing to directory.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Linux	Linux	>= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 44079e544c9f6e3e9fb43a16ddf8b08cf686d657; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < b7ce8db490286c2e009758fa1416d66aeb333614; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 2a879da5c34a1e5d971e815d5b30f27eb6d69efc; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 1ed343481ba6911178bc5ca7a51be319eafcc747; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < b37f2f332b40ad1c27f18682a495850f2f04db0a
Linux	Linux	5.15

References

Timeline

Published: May 1, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-377767.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a r CVE-2025-377777.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transp CVE-2025-377787.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees CVE-2025-377795.5In the Linux kernel, the following vulnerability has been resolved: lib/iov_iter: fix to increase non slab folio refcount When testing ERO CVE-2025-377807.1In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid syzbot reported a slab-out-of-CVE-2025-377815.5In the Linux kernel, the following vulnerability has been resolved: i2c: cros-ec-tunnel: defer probe if parent EC is not present When i2c-CVE-2025-377835.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check The CVE-2025-377845.5In the Linux kernel, the following vulnerability has been resolved: net: ti: icss-iep: Fix possible NULL pointer dereference for perout req CVE-2025-377857.1In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted files CVE-2025-377867.8In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in ds CVE-2025-377875.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were nev CVE-2025-377885.5In the Linux kernel, the following vulnerability has been resolved: cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path In t

CVE-2025-37775: Medium severity, CVSS 5.5 | Vulnix