CVE-2025-39933
Critical · CVSS 9.4- CVSS
- 9.4
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- NVD-CWE-noinfo
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspired by the related server fixes.
Affected packages
| Linux | Kernel | 4.16.0 → 6.16.9 |
References
Status: profiled · ingested 2026-07-30T12:00:00.000Z