CVE-2025-37956

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: prevent rename with empty string

Client can send empty newname string to ksmbd server. It will cause a kernel oops from d_alloc. This patch return the error when attempting to rename a file or directory with an empty new name string.

This vulnerability poses no security risk to Red Hat Enterprise Linux environments because the in-kernel SMB server (ksmbd) is neither enabled nor compiled in Red Hat supported kernels. While an authenticated network user could induce a denial of service by providing an empty target filename during a rename request, exploitation requires this specific kernel server to be active. Red Hat platforms deploy user-space Samba implementations for SMB file sharing, leaving default configurations unaffected.