Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-39975

smb: client: fix wrong index reference in smb2_compound_op()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2_compound_op() In smb2_compound_op(), the loop that processes each command's response uses wrong indices when accessing response bufferes. This incorrect indexing leads to improper handling of command results. Also, if incorrectly computed index is greather than or equal to MAX_COMPOUND, it can cause out-of-bounds accesses.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5ddcc9e92d54548219985ce4de88618fb53e14ec to < ba7bcfd52c66dd1c2dfa5142aca7e4a70b62dfa5affected
  • efe8db3ecaa40a8520dc9a54283dcecd82ceea9c to < bfb1e2aad1fecef8320fd71332acde0d53a8d699affected
  • 3681c74d342db75b0d641ba60de27bf73e16e66b to < 093615fc76063ea08d454ba86677ce64c736e806affected
  • 3681c74d342db75b0d641ba60de27bf73e16e66b to < fbe2dc6a9c7318f7263f5e4d50f6272b931c5756affected
  • 77aefd1d9b790f60634adebbdcfffbe934f41c34affected
  • 6.6.75 to < 6.6.109affected
  • 6.12.12 to < 6.12.50affected
  • 6.13.1 to < 6.14affected

Linux Linux

Default version status: affected

  • 6.14affected
  • 0 to < 6.14unaffected
  • 6.6.109 to ≤ 6.6.*unaffected
  • 6.12.50 to ≤ 6.12.*unaffected
  • 6.16.10 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References