Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2025-39933

smb: client: let recv_done verify data_offset, data_length and remaining_data_length

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspired by the related server fixes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f198186aa9bbd60fae7a2061f4feec614d880299 to < fdc23a47be015fba915c4f9dfd43c65ad4829a35affected
  • f198186aa9bbd60fae7a2061f4feec614d880299 to < f23d5c6b7540ec9b1e73a8ea3b2ae9045248d728affected
  • f198186aa9bbd60fae7a2061f4feec614d880299 to < 241e58de23e7c1bbb9bee526c17d9a0f2a90fbadaffected
  • f198186aa9bbd60fae7a2061f4feec614d880299 to < 581fb78e0388b78911b0c920e4073737090c8b5faffected
  • f198186aa9bbd60fae7a2061f4feec614d880299 to < f57e53ea252363234f86674db475839e5b87102eaffected

Linux Linux

Default version status: affected

  • 4.16affected
  • 0 to < 4.16unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.16.9 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References