CVE-2025-39933

critical · 9.4

In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspired by the related server fixes.

9.4

CVSS

0.2%

EPSS (exploit prob.)

12th

EPSS percentile

2025-10-04

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Affected products

Vendor	Product	Affected versions
linux	linux_kernel	>= 4.16, < 6.16.9
linux	linux_kernel	6.17
linux	linux_kernel	6.17
linux	linux_kernel	6.17
linux	linux_kernel	6.17
linux	linux_kernel	6.17
linux	linux_kernel	6.17

Check a specific version with /api/v1/cve/match.

References

https://git.kernel.org/stable/c/581fb78e0388b78911b0c920e4073737090c8b5f
https://git.kernel.org/stable/c/f57e53ea252363234f86674db475839e5b87102e

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-39933