CVE-2025-39933

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-39933
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39933.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-39933
Downstream
BELL (1)
CGA (74)
CLSA (3)
DEBIAN (1)
ECHO (1)
RHSA (14)
RLSA (4)
ROOT (5)
UBUNTU (1)
Related
ALSA (4)
Published
2025-10-04T07:30:57Z
Modified
2026-10-22T10:31:16Z
Severity
  • 9.4 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H CVSS Calculator
Summary
smb: client: let recv_done verify data_offset, data_length and remaining_data_length
Details

In the Linux kernel, the following vulnerability has been resolved:

smb: client: let recv_done verify data_offset, data_length and remaining_data_length

This is inspired by the related server fixes.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39933.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f198186aa9bbd60fae7a2061f4feec614d880299
Fixed
f23d5c6b7540ec9b1e73a8ea3b2ae9045248d728
Fixed
241e58de23e7c1bbb9bee526c17d9a0f2a90fbad
Fixed
581fb78e0388b78911b0c920e4073737090c8b5f
Fixed
f57e53ea252363234f86674db475839e5b87102e

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39933.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.16.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.16.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39933.json"