EUVD-2025-36664

In the Linux kernel, the following vulnerability has been resolved: ksmbd: transportipc: validate payload size before reading handle handleresponse dereferences the payload as a 4-byte handle without verifying that the declared payload size is at least 4 bytes. A malformed or truncated message fr...

CVE-2025-40084

CVE-2025-40084 relates to the Linux kernel ksmbd transport_ipc path, where handle_response() dereferenced a 4-byte handle without validating that the payload length was at least 4 bytes. A malformed or truncated ksmbd.mountd message could enable a 4-byte read past the declared payload size, riski...