PT-2025-40638 · Linux+4 · Linux Kernel+4

CVE-2025-39942

·

Published

2025-09-14

·

Updated

2026-08-30

CVSS v2.0

7.7

High

VectorAV:A/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel's ksmbd component, specifically within the smbdirect functionality. The issue involves insufficient verification of remaining data length against max fragmented recv size. This oversight is related to a check for data offset + data length.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-68139
AZL-75336
BDU:2026-02673
CVE-2025-39942
DLA-4379-1
DSA-6053-1
ECHO-AFAE-4892-4953
MGASA-2025-0309
MGASA-2025-0310
OESA-2025-2882
OESA-2025-2883
OESA-2025-2884
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8100-1
USN-8125-1
USN-8126-1
USN-8165-1
USN-8261-1

Affected Products

Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu