CVE-2025-39933
smb: client: let recv_done verify data_offset, data_length and remaining_data_length
References
Notes
carnil> Introduced in f198186aa9bb ("CIFS: SMBD: Establish SMB Direct connection").
carnil> Vulnerable versions: 4.16.
Bugs
Status
| Branch |
Status |
| upstream |
released (6.17-rc7) [f57e53ea252363234f86674db475839e5b87102e]
|
| 7.2-upstream-stable |
N/A "Fixed before branching point"
|
| 7.1-upstream-stable |
N/A "Fixed before branching point"
|
| 7.0-upstream-stable |
N/A "Fixed before branching point"
|
| 6.19-upstream-stable |
N/A "Fixed before branching point"
|
| 6.18-upstream-stable |
N/A "Fixed before branching point"
|
| 6.17-upstream-stable |
N/A "Fixed before branching point"
|
| 6.16-upstream-stable |
released (6.16.9) [581fb78e0388b78911b0c920e4073737090c8b5f]
|
| 6.12-upstream-stable |
released (6.12.114) [241e58de23e7c1bbb9bee526c17d9a0f2a90fbad]
|
| 6.6-upstream-stable |
released (6.6.160) [f23d5c6b7540ec9b1e73a8ea3b2ae9045248d728]
|
| 6.1-upstream-stable |
released (6.1.191) [fdc23a47be015fba915c4f9dfd43c65ad4829a35]
|
| 5.10-upstream-stable |
needed
|
| sid |
released (6.16.9-1)
|
| 6.12-trixie-security |
released (6.12.115-1)
|
| 6.1-bookworm-security |
needed
|
| 5.10-bullseye-security |
needed
|
