Kernel Write Iteration Warning in Linux Packages: CVE-2025-37775
Summary
CVE-2025-37775: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix the warning from kernel_write_iter [ 2110.972290] ------------[ cut here ]------------ [ 2110.972301] WARNING: CPU: 3 PID: 735 at fs/read_wri... Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It is widely used in various distributions, including Debian. The kernel's functionality includes process management, memory management, device drivers, and system calls. This vulnerability specifically affects the ksmbd component, which is responsible for SMB (Server Message Block) file sharing, and can lead to warnings during write operations.
Vulnerability Detail
CVE-2025-37775 is a vulnerability in the Linux kernel that arises from improper handling of write operations in the ksmbd component. The issue manifests as a warning during the execution of the __kernel_write_iter function, indicating that the system is attempting to write to a directory, which is not allowed. This could potentially lead to unexpected behavior or system instability, as it violates the expected operations of the file system.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available.
Conclusion
CVE-2025-37775 is a significant vulnerability in the Linux kernel that affects the ksmbd component. It is crucial for users to update their systems to the patched version to avoid potential issues. Monitoring tools like Vulert can assist in identifying vulnerabilities in your applications.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37775 is a vulnerability in the Linux kernel related to improper handling of write operations in the ksmbd component.
This vulnerability can lead to warnings during write operations and may cause unexpected behavior or instability in the file system.
Yes, a patch is available for Debian 12 in version 6.1.135-1. Users should update their packages to this version.
While there are no specific workarounds, it is advisable to monitor the situation and apply the patch as soon as possible.
You can use Vulert, which allows you to monitor and alert for open-source vulnerabilities in your software using just a manifest file. Visit Vulert Scanner to check your application without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
