exploitDog

CVE-2025-39943

Опубликовано: 04 окт. 2025

Источник: nvd

CVSS3: 7.1

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

If data_offset and data_length of smb_direct_data_transfer struct are invalid, out of bounds issue could happen. This patch validate data_offset and data_length field in recv_done.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.15.1 (включая) до 5.15.194 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.154 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.108 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.49 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.16.9 (исключая)

cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.15:rc7:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc6:*:*:*:*:*:*

EPSS

Процентиль: 4%

0.00018

Низкий

7.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2025-39943

CVSS3: 7.1

ubuntu

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer If data_offset and data_length of smb_direct_data_transfer struct are invalid, out of bounds issue could happen. This patch validate data_offset and data_length field in recv_done.

CVE-2025-39943

msrc

4 месяца назад

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

CVE-2025-39943

CVSS3: 7.1

debian

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: k ...

GHSA-xw7x-gch6-cpx7

CVSS3: 7.1

github

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer If data_offset and data_length of smb_direct_data_transfer struct are invalid, out of bounds issue could happen. This patch validate data_offset and data_length field in recv_done.

EPSS

Процентиль: 4%

0.00018

Низкий

7.1 High

CVSS3

Дефекты

CWE-125