CVE-2025-39943: ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: smbdirect: validate dataoffset and datalength field of smbdirectdatatransfer
If dataoffset and datalength of smbdirectdatatransfer struct are invalid, out of bounds issue could happen. This patch validate dataoffset and datalength field in recvdone.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39943?
The severity of CVE-2025-39943 is high due to the potential for out-of-bounds issues that could lead to system compromise.
How do I fix CVE-2025-39943?
To fix CVE-2025-39943, you should update to the latest version of the Linux kernel where the vulnerability has been patched.
What software is affected by CVE-2025-39943?
CVE-2025-39943 affects the Linux Kernel, specifically in the ksmbd module handling smb_direct_data_transfer.
What exploit risk does CVE-2025-39943 present?
CVE-2025-39943 presents a risk of potential arbitrary code execution and data leakage due to the out-of-bounds issue.
When was CVE-2025-39943 disclosed?
CVE-2025-39943 was disclosed as part of recent updates to the Linux kernel addressing multiple vulnerabilities.