CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Linux.
CVE
CVE-2025-38737
Severity
CRITICAL
CVSS
9.8
EPSS
0.35%
Linux
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_folioq_buffer() as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should start a fresh buffer, but the value is currently undefined.
Related CVEs
Other vulnerabilities affecting the same vendor(s)