What’s Vulnerable › Vulnerabilities

CVE-2025-39933: smb: client: let recv_done verify data_offset, data_length and remaining_data_length

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-04 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspired by the related server fixes.

Affected products

• Linux kernel: from 4.16 before 6.16.9; 6.17-rc1, 6.17-rc2, 6.17-rc3, 6.17-rc4, 6.17-rc5, 6.17-rc6 — fixed in 6.16.9
• Linux: 4.16 — fixed in 6.17

How to fix

Upgrade to a fixed version: Linux kernel 6.16.9; Linux 6.17. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/241e58de23e7c1bbb9bee526c17d9a0f2a90fbad
• https://git.kernel.org/stable/c/581fb78e0388b78911b0c920e4073737090c8b5f
• https://git.kernel.org/stable/c/f23d5c6b7540ec9b1e73a8ea3b2ae9045248d728
• https://git.kernel.org/stable/c/f57e53ea252363234f86674db475839e5b87102e
• https://git.kernel.org/stable/c/fdc23a47be015fba915c4f9dfd43c65ad4829a35

Get alerted when CVE-2025-39933 or the next vulnerability affects your stack