CVE-2025-39975
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
In the Linux kernel, the SMB client's smb2_compound_op() function uses incorrect indices when processing compound command responses. This can lead to improper handling of results and, if the index exceeds MAX_COMPOUND, to out-of-bounds memory accesses.
Risk Assessment
This flaw could allow a remote attacker to crash the system or potentially execute arbitrary code in kernel context by crafting malicious SMB responses.
Recommendation
Install the Linux kernel update that fixes CVE-2025-39975 by correcting the indexing in smb2_compound_op().
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2_compound_op() In smb2_compound_op(), the loop that processes each command's response uses wrong indices when accessing response bufferes. This incorrect indexing leads to improper handling of command results. Also, if incorrectly computed index is greather than or equal to MAX_COMPOUND, it can cause out-of-bounds accesses.