Linux Kernel Vulnerability in ksmbd SmbDirect Feature

CVE-2025-39942

What is CVE-2025-39942?

A vulnerability has been identified in the Linux kernel's ksmbd module related to the smbdirect feature. The issue arises from inadequate verification of the remaining data length against the maximum allowable size for fragmented receive operations. This oversight could potentially allow for buffer overflow conditions or improper data handling, leading to various security risks. It is advised that users update their Linux kernel versions to mitigate exposure to this issue.

References