CVE-2025-38660
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
In the Linux kernel, the Ceph filesystem function parse_longname() uses strrchr() on a string that is not NUL-terminated. This may lead to incorrect behavior or potential security issues.
Risk Assessment
This may lead to incorrect parsing of names in the Ceph filesystem, potentially causing errors or crashes.
Recommendation
Apply the patch that creates a NUL-terminated copy of the string before using strrchr().
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: [ceph] parse_longname(): strrchr() expects NUL-terminated string ... and parse_longname() is not guaranteed that. That's the reason why it uses kmemdup_nul() to build the argument for kstrtou64(); the problem is, kstrtou64() is not the only thing that need it. Just get a NUL-terminated copy of the entire thing and be done with that...