CVE-2025-39933 — Out-of-bounds Write in Linux

CWE-787 — Out-of-bounds Write7 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 95.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LinuxLinux KernelDebian Linux+1 more
Timeline
PublishedOct 4
Latest updateOct 14

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspired by the related server fixes.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages5 packages

▶NVDlinux/linux_kernel4.16 — 6.16.9+1
▶Debianlinux/linux_kernel< 6.16.9-1
▶CVEListV5linux/linuxf198186aa9bbd60fae7a2061f4feec614d880299 — 581fb78e0388b78911b0c920e4073737090c8b5f+2
▶debiandebian/linux< linux 6.16.9-1 (forky)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-2vj6-wmm6-q722: In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_len↗2025-10-04
▶
OSV
CVE-2025-39933: In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_leng↗2025-10-04
▶

📋Vendor Advisories

3
Microsoft
smb: client: let recv_done verify data_offset, data_length and remaining_data_length↗2025-10-14
▶
Red Hat
kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length↗2025-10-04
▶
Debian
CVE-2025-39933: linux - In the Linux kernel, the following vulnerability has been resolved: smb: client...↗2025
▶

🕵️Threat Intelligence

1
Bleepingcomputer
Microsoft October 2025 Patch Tuesday fixes 6 zero-days, 172 flaws↗2025-10-14
▶