Linux Kernel Vulnerability in SMB Client
CVE-2025-39933

Currently unrated

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
4 October 2025

What is CVE-2025-39933?

A vulnerability has been identified in the Linux kernel that affects the SMB client functionality. This issue allows the 'recv_done' function to inadequately verify parameters related to data transfer, specifically 'data_offset', 'data_length', and 'remaining_data_length'. If exploited, this flaw may lead to unexpected behavior or potential data integrity issues. It is recommended that users of affected Linux kernel versions apply the latest updates and patches to mitigate the risk associated with this vulnerability.

Affected Version(s)

Linux f198186aa9bbd60fae7a2061f4feec614d880299 < 581fb78e0388b78911b0c920e4073737090c8b5f

Linux f198186aa9bbd60fae7a2061f4feec614d880299

Linux 4.16

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-39933 : Linux Kernel Vulnerability in SMB Client