CVE-2025-39933

CriticalCVSS 9.4

Published: 04/10/2025(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

In the Linux kernel SMB client, the recv_done function did not properly verify the data_offset, data_length, and remaining_data_length fields, potentially leading to incorrect handling of server responses.

Risk Assessment

This vulnerability could allow a remote SMB server to manipulate data sent to the client, potentially leading to data integrity issues or crashes.

Recommendation

Apply the Linux kernel patch that adds verification of data_offset, data_length, and remaining_data_length fields in recv_done.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspired by the related server fixes.