CVE-2025-39943

HIGH EPSS 3.5%
Published Oct 4, 20258mo ago · Modified Jun 17, 20261w ago
7.1 CVSS 3.1
High
Find Similar
Published Oct 4, 2025 8mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer If data_offset and data_length of smb_direct_data_transfer struct are invalid, out of bounds issue could happen. This patch validate data_offset and data_length field in recv_done.

CVSS Details

Base Score
7.1
Exploitability
1.8
Impact
5.2
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
3.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-125 Out-of-bounds Read Memory Safety

Affected Products 13

VendorProductVersionRange
linuxlinux_kernel*≥5.15.1  –  <5.15.194
linuxlinux_kernel*≥5.16  –  <6.1.154
linuxlinux_kernel*≥6.2  –  <6.6.108
linuxlinux_kernel*≥6.7  –  <6.12.49
linuxlinux_kernel*≥6.13  –  <6.16.9
linuxlinux_kernel5.15any
linuxlinux_kernel5.15any
linuxlinux_kernel6.17any
linuxlinux_kernel6.17any
linuxlinux_kernel6.17any
linuxlinux_kernel6.17any
linuxlinux_kernel6.17any
linuxlinux_kernel6.17any

References 6

  • git.kernel.org https://git.kernel.org/stable/c/5282491fc49d5614ac6ddcd012e5743eecb6a67c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/529b121b00a6ee3c88fb3c01b443b2b81f686d48
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/773fddf976d282ef059c36c575ddb81567acd6bc
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8be498fcbd5b07272f560b45981d4b9e5a2ad885
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bdaab5c6538e250a9654127e688ecbbeb6f771d5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eb0378dde086363046ed3d7db7f126fc3f76fd70
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/5282491fc49d5614ac6ddcd012e5743eecb6a67c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/529b121b00a6ee3c88fb3c01b443b2b81f686d48
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/773fddf976d282ef059c36c575ddb81567acd6bc
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8be498fcbd5b07272f560b45981d4b9e5a2ad885
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bdaab5c6538e250a9654127e688ecbbeb6f771d5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eb0378dde086363046ed3d7db7f126fc3f76fd70
    Patch