---
id: CVE-2025-38208
title: 'smb: client: add NULL check in automount_fullpath'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  smb: client: add NULL check in automount_fullpath

  page is checked for null in __build_path_from_dentry_optional_prefix
  when tcon->origin_fullpath is not set. However, …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= d5a863a153e90996ab2aef6b9e08d509f4d5662b <
    37166d63e42c34846a16001950ecec96229a8d17
  - >-
    Linux >= d5a863a153e90996ab2aef6b9e08d509f4d5662b <
    a9e916fa5c7d0ec2256aa44aa24ddd92f529ce35
  - >-
    Linux >= d5a863a153e90996ab2aef6b9e08d509f4d5662b <
    cce8e71ca1f7ad9045707f0d22490c1e9ed1df6c
  - >-
    Linux >= d5a863a153e90996ab2aef6b9e08d509f4d5662b <
    f1e7a277a1736e12cc4bd6d93b8a5c439b8ca20c
  - Linux e91802036b3e6e6e803a17ddf5783a6354fe5380
  - Linux >= 6.2.13 < 6.3
  - Linux 6.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:51:25.835217Z'
published: '2025-07-04'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:52:20.689Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38208'
references:
  - url: 'https://git.kernel.org/stable/c/37166d63e42c34846a16001950ecec96229a8d17'
  - url: 'https://git.kernel.org/stable/c/a9e916fa5c7d0ec2256aa44aa24ddd92f529ce35'
  - url: 'https://git.kernel.org/stable/c/cce8e71ca1f7ad9045707f0d22490c1e9ed1df6c'
  - url: 'https://git.kernel.org/stable/c/f1e7a277a1736e12cc4bd6d93b8a5c439b8ca20c'
tags:
  - cve.org
epss: 0.00182
epssPercentile: 0.07842
ingestedAt: '2026-11-05T22:38:31.930Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

smb: client: add NULL check in automount_fullpath

page is checked for null in __build_path_from_dentry_optional_prefix
when tcon->origin_fullpath is not set. However, the check is missing when
it is set.
Add a check to prevent a potential NULL pointer dereference.

## Affected

- `Linux >= d5a863a153e90996ab2aef6b9e08d509f4d5662b < 37166d63e42c34846a16001950ecec96229a8d17`
- `Linux >= d5a863a153e90996ab2aef6b9e08d509f4d5662b < a9e916fa5c7d0ec2256aa44aa24ddd92f529ce35`
- `Linux >= d5a863a153e90996ab2aef6b9e08d509f4d5662b < cce8e71ca1f7ad9045707f0d22490c1e9ed1df6c`
- `Linux >= d5a863a153e90996ab2aef6b9e08d509f4d5662b < f1e7a277a1736e12cc4bd6d93b8a5c439b8ca20c`
- `Linux e91802036b3e6e6e803a17ddf5783a6354fe5380`
- `Linux >= 6.2.13 < 6.3`
- `Linux 6.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.