CVE-2025-38523: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-38523 is a vulnerability discovered in the Linux kernel's CIFS (Common Internet File System) implementation, specifically affecting the smbd_response slab handling. The vulnerability was disclosed on August 16, 2025, and affects systems with CONFIG_HARDENED_USERCOPY enabled (NVD, Debian Tracker).

The vulnerability stems from improper handling of received data in the smbdirect client code. When using copy_to_iter() to copy data from the smbd_response struct's packet trailer to a folioq buffer provided by netfslib, systems with CONFIG_HARDENED_USERCOPY=y experience a kernel oops. This occurs because the smbd_response slab's packet field isn't marked as being permitted for usercopy (NVD).

When exploited, the vulnerability causes the kernel to crash with an oops message, leading to a denial of service condition. The system logs show detection of kernel memory exposure attempts from the SLUB object 'smbd_response' (NVD).

The fix involves modifying the kmem_slab_create() parameters to properly indicate that copy_to_iter() is permitted from the packet region of the smbd_response slab objects, excluding the header space. Various Linux distributions have released patches, including Debian which has fixed versions available for multiple releases (Debian Tracker).