CVE-2025-39933 | BDVDB-2026-296749 Detail
LinuxLinux
Description#
In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspired by the related server fixes.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact low, availability impact high. Attack vector: network.
Weaknesses#
No weakness recorded in the source data.
References#
- https://git.kernel.org/stable/c/fdc23a47be015fba915c4f9dfd43c65ad4829a35
- https://git.kernel.org/stable/c/f23d5c6b7540ec9b1e73a8ea3b2ae9045248d728
- https://git.kernel.org/stable/c/241e58de23e7c1bbb9bee526c17d9a0f2a90fbad
- https://git.kernel.org/stable/c/581fb78e0388b78911b0c920e4073737090c8b5f
- https://git.kernel.org/stable/c/f57e53ea252363234f86674db475839e5b87102e
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.