Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate the dataoffset and datalength fields of the smbdirectdatatransfer structure. If the dataoffset and datalength fields of the smbdirectdatatransfer structure are invalid, an out-of-bounds issue may occur...

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

...

CVE-2025-39943

The CVE-2025-39943 issue affects the Linux kernel’s ksmbd direct SMB transport (smb_direct_data_transfer) where invalid data_offset or data_length in smb_direct_data_transfer could trigger an out-of-bounds condition. The root cause is improper validation in the recv_done path, which can lead to a...