---
id: CVE-2025-37956
title: 'ksmbd: prevent rename with empty string'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ksmbd: prevent rename with empty string

  Client can send empty newname string to ksmbd server.
  It will cause a kernel oops from d_alloc.
  This patch return the error whe…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf <
    35e2964e93d95185d2db0c0ffd9959d0197b3956
  - >-
    Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf <
    6ee551672c8cf36108b0cfba92ec0c7c28ac3439
  - >-
    Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf <
    c57301e332cc413fe0a7294a90725f4e21e9549d
  - >-
    Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf <
    d7f2c00acb1ef64304fd40ac507e9213ff1d9b5c
  - >-
    Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf <
    53e3e5babc0963a92d856a5ec0ce92c59f54bc12
  - Linux 5.15
published: '2025-05-20'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:21:28.534Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-37956'
references:
  - url: 'https://git.kernel.org/stable/c/35e2964e93d95185d2db0c0ffd9959d0197b3956'
  - url: 'https://git.kernel.org/stable/c/6ee551672c8cf36108b0cfba92ec0c7c28ac3439'
  - url: 'https://git.kernel.org/stable/c/c57301e332cc413fe0a7294a90725f4e21e9549d'
  - url: 'https://git.kernel.org/stable/c/d7f2c00acb1ef64304fd40ac507e9213ff1d9b5c'
  - url: 'https://git.kernel.org/stable/c/53e3e5babc0963a92d856a5ec0ce92c59f54bc12'
tags:
  - cve.org
epss: 0.0038
epssPercentile: 0.32212
ingestedAt: '2026-11-03T16:49:26.501Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: prevent rename with empty string

Client can send empty newname string to ksmbd server.
It will cause a kernel oops from d_alloc.
This patch return the error when attempting to rename
a file or directory with an empty new name string.

## Affected

- `Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 35e2964e93d95185d2db0c0ffd9959d0197b3956`
- `Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 6ee551672c8cf36108b0cfba92ec0c7c28ac3439`
- `Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf < c57301e332cc413fe0a7294a90725f4e21e9549d`
- `Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf < d7f2c00acb1ef64304fd40ac507e9213ff1d9b5c`
- `Linux >= 0626e6641f6b467447c81dd7678a69c66f7746cf < 53e3e5babc0963a92d856a5ec0ce92c59f54bc12`
- `Linux 5.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.