Riskcovery

CVE-2025-39942

ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

State
Published
Severity
7.5 High
Published
Oct 4, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

This is inspired by the check for data_offset + data_length.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2ea086e35c3d726a3bacd0a971c1f02a50e98206 to before 196a3a7676d726ee67621ea2bf3b7815ac2685b4Affected
  • 2ea086e35c3d726a3bacd0a971c1f02a50e98206 to before d3cb3f209d35c44b7ee74f77ed27ebb28995b9ceAffected
  • 2ea086e35c3d726a3bacd0a971c1f02a50e98206 to before 9644798294c7287e65a7b26e35aa6d2ce3345bccAffected
  • 2ea086e35c3d726a3bacd0a971c1f02a50e98206 to before c64b915bb3d9339adcae5db4be2c35ffbef5e615Affected
  • 2ea086e35c3d726a3bacd0a971c1f02a50e98206 to before e1868ba37fd27c6a68e31565402b154beaa65df0Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.1.154 through 6.1.*Not affected
  • 6.6.108 through 6.6.*Not affected
  • 6.12.49 through 6.12.*Not affected
  • 6.16.9 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.