CVE-2025-39943

Published: Oct 4, 2025Modified: Oct 19, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer If data_offset and data_length of smb_direct_data_transfer struct are invalid, out of bounds issue could happen. This patch validate data_offset and data_length field in recv_done.

Affected (13)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	5.15.1 ≤ version < 5.15.194
Linux Linux Kernel	5.16 ≤ version < 6.1.154
Linux Linux Kernel	6.13 ≤ version < 6.16.9
Linux Linux Kernel	6.2 ≤ version < 6.6.108
Linux Linux Kernel	6.7 ≤ version < 6.12.49
Linux Linux Kernel	Version 5.15
Linux Linux Kernel	Version 5.15 rc7
Linux Linux Kernel	Version 6.17 rc1
Linux Linux Kernel	Version 6.17 rc2
Linux Linux Kernel	Version 6.17 rc3
Linux Linux Kernel	Version 6.17 rc4
Linux Linux Kernel	Version 6.17 rc5
Linux Linux Kernel	Version 6.17 rc6