Out Of Bounds Vulnerability in Linux Kernel Affecting SMB Direct Data Transfer

CVE-2025-39943

What is CVE-2025-39943?

A vulnerability in the Linux kernel's implementation of SMB Direct allows for potential out of bounds issues. Specifically, the fields data_offset and data_length in the smb_direct_data_transfer structure may be exploited if they are invalid. This could lead to unintended behavior during data transfer operations. A patch has been applied to validate these fields in the recv_done function, addressing the potential risk associated with improper handling of the data parameters.

References