CVE-2025-38660

Summary

In the Linux kernel, the following vulnerability has been resolved:

[ceph] parse_longname(): strrchr() expects NUL-terminated string

… and parse_longname() is not guaranteed that. That's the reason why it uses kmemdup_nul() to build the argument for kstrtou64(); the problem is, kstrtou64() is not the only thing that need it.

Just get a NUL-terminated copy of the entire thing and be done with that…

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxdd66df0053ef84add5e684df517aa9b498342381 < bb80f7618832d26f7e395f52f82b1dac76223e5faffected
LinuxLinuxdd66df0053ef84add5e684df517aa9b498342381 < 3145b2b11492d61c512bbc59660bb823bc757f48affected
LinuxLinuxdd66df0053ef84add5e684df517aa9b498342381 < 493479af8af3ab907f49e99323777d498a4fbd2baffected
LinuxLinuxdd66df0053ef84add5e684df517aa9b498342381 < 101841c38346f4ca41dc1802c867da990ffb32ebaffected
LinuxLinux6.6affected
LinuxLinux0 < 6.6unaffected
LinuxLinux6.12.42 <= 6.12.*unaffected
LinuxLinux6.15.10 <= 6.15.*unaffected
LinuxLinux6.16.1 <= 6.16.*unaffected
LinuxLinux6.17 <= *unaffected

Weaknesses

References