Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

Vulnerability IntelligenceCVE-2025-39943

CVE-2025-39943

CRITICAL9.4

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

Published Oct 4, 2025

Modified 1 weeks ago

Details

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

If data_offset and data_length of smb_direct_data_transfer struct are invalid, out of bounds issue could happen. This patch validate data_offset and data_length field in recv_done.

References

WEB

https://git.kernel.org/stable/c/5282491fc49d5614ac6ddcd012e5743eecb6a67c

WEB

https://git.kernel.org/stable/c/529b121b00a6ee3c88fb3c01b443b2b81f686d48

WEB

https://git.kernel.org/stable/c/773fddf976d282ef059c36c575ddb81567acd6bc

WEB

https://git.kernel.org/stable/c/8be498fcbd5b07272f560b45981d4b9e5a2ad885

WEB

https://git.kernel.org/stable/c/bdaab5c6538e250a9654127e688ecbbeb6f771d5

WEB

https://git.kernel.org/stable/c/eb0378dde086363046ed3d7db7f126fc3f76fd70

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-39943

CVSS Analysis

CVSS v3.1

9.4

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

LowI:L

Availability

HighA:H

9.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Ecosystems

Timeline

PublishedOct 4, 2025

ModifiedAug 5, 2026

CVE-2025-39943 | Mondoo Vulnerability Intelligence