{"id":"CVE-2025-39933","title":"smb: client: let recv_done verify data_offset, data_length and remaining_data_length","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: let recv_done verify data_offset, data_length and remaining_data_length\n\nThis is inspired by the related server fixes.","severity":"critical","cvss":9.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= f198186aa9bbd60fae7a2061f4feec614d880299 < fdc23a47be015fba915c4f9dfd43c65ad4829a35","Linux >= f198186aa9bbd60fae7a2061f4feec614d880299 < f23d5c6b7540ec9b1e73a8ea3b2ae9045248d728","Linux >= f198186aa9bbd60fae7a2061f4feec614d880299 < 241e58de23e7c1bbb9bee526c17d9a0f2a90fbad","Linux >= f198186aa9bbd60fae7a2061f4feec614d880299 < 581fb78e0388b78911b0c920e4073737090c8b5f","Linux >= f198186aa9bbd60fae7a2061f4feec614d880299 < f57e53ea252363234f86674db475839e5b87102e","Linux 4.16"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-06-10T20:40:59.041091Z"},"published":"2025-10-04","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:22:38.495Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39933","references":[{"url":"https://git.kernel.org/stable/c/fdc23a47be015fba915c4f9dfd43c65ad4829a35"},{"url":"https://git.kernel.org/stable/c/f23d5c6b7540ec9b1e73a8ea3b2ae9045248d728"},{"url":"https://git.kernel.org/stable/c/241e58de23e7c1bbb9bee526c17d9a0f2a90fbad"},{"url":"https://git.kernel.org/stable/c/581fb78e0388b78911b0c920e4073737090c8b5f"},{"url":"https://git.kernel.org/stable/c/f57e53ea252363234f86674db475839e5b87102e"}],"tags":["cve.org"],"epss":0.00347,"epssPercentile":0.28398,"ingestedAt":"2026-10-21T12:48:53.685Z","slug":"CVE-2025-39933","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: let recv_done verify data_offset, data_length and remaining_data_length\n\nThis is inspired by the related server fixes.\n\n## Affected\n\n- `Linux >= f198186aa9bbd60fae7a2061f4feec614d880299 < fdc23a47be015fba915c4f9dfd43c65ad4829a35`\n- `Linux >= f198186aa9bbd60fae7a2061f4feec614d880299 < f23d5c6b7540ec9b1e73a8ea3b2ae9045248d728`\n- `Linux >= f198186aa9bbd60fae7a2061f4feec614d880299 < 241e58de23e7c1bbb9bee526c17d9a0f2a90fbad`\n- `Linux >= f198186aa9bbd60fae7a2061f4feec614d880299 < 581fb78e0388b78911b0c920e4073737090c8b5f`\n- `Linux >= f198186aa9bbd60fae7a2061f4feec614d880299 < f57e53ea252363234f86674db475839e5b87102e`\n- `Linux 4.16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":52,"depthScoreParts":{"impact":51.7,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}