CVE-2025-37947

Name	CVE-2025-37947
Description	In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating pos ksmbd_vfs_stream_write() did not validate whether the write offset (pos) was within the bounds of the existing stream data length (v_len). If pos was greater than or equal to v_len, this could lead to an out-of-bounds memory write. This patch adds a check to ensure pos is less than v_len before proceeding. If the condition fails, -EINVAL is returned.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	bullseye	5.10.223-1	fixed
	bullseye (security)	5.10.237-1	fixed
	bookworm	6.1.137-1	vulnerable
	bookworm (security)	6.1.135-1	vulnerable
	trixie	6.12.27-1	vulnerable
	sid	6.12.29-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
linux	source	bullseye	(not affected)
linux	source	(unstable)	6.12.29-1

[bullseye] - linux <not-affected> (Vulnerable code not present)
https://git.kernel.org/linus/0ca6df4f40cf4c32487944aaf48319cb6c25accc (6.15-rc6)