CVE-2025-38167

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdr_first_de() return value The hdr_first_de() function returns a pointer to a struct NTFS_DE. This pointer may be NULL. To handle the NULL error effectively, it is important to implement an error handler. This will help manage potential errors consistently. Additionally, error handling for the return value already exists at other points where this function is called. Found by Linux Verification Center (linuxtesting.org) with SVACE.

• CWE-476

• https://git.kernel.org/stable/c/2d5879f64554181b89f44d4817b9ea86e8e913e1Patch
• https://git.kernel.org/stable/c/4ecd0cde89feee26525ccdf1af0c1ae156ca010bPatch
• https://git.kernel.org/stable/c/5390b3d4c6d41d05bb9149d094d504cbc9ea85bfPatch
• https://git.kernel.org/stable/c/701340a25b1ad210e6b8192195be21fd3fcc22c7Patch
• https://git.kernel.org/stable/c/83cd0aa74793384dbdffc140500b200e9776a302Patch
• https://git.kernel.org/stable/c/af5cab0e5b6f8edb0be51a9f47f3f620e0b4fd70Patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlThird Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Published

Jul 3, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38161In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38162In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38163In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38164In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38165In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38166In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38168In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38169In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3817A vulnerability, which was classified as critical, has been …8.8
• CVE-2025-38170In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38171In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38172In the Linux kernel, the following vulnerability has been re…7.8