PT-2025-40629 · Linux+2 · Linux Kernel+2

Published 2025-09-17 · Updated 2026-05-26 · CVE-2025-39933

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's SMB client implementation. Specifically, the recv done function did not adequately verify data offset, data length, and remaining data length. This issue is related to server-side fixes addressing similar problems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2026:0759

ALSA-2026:0760

ALSA-2026:0793

ALSA-2026:2282

BDU:2026-04494

CVE-2025-39933

ECHO-5456-532E-B855

RHSA-2026:0759

RHSA-2026:0760

RHSA-2026:0793

RHSA-2026:1727

RHSA-2026:2282

RHSA-2026:2759

RHSA-2026:2766

RHSA-2026:3267

RHSA-2026:3268

RHSA-2026:3277

RHSA-2026:3293

RHSA-2026:3358

RHSA-2026:3360

RHSA-2026:3375

Affected Products

Debian

Linux Kernel

Rocky Linux

References · 74

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39933.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39933 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39933 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:0760 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2025-39933 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:0759 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:0759 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-0760.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-39933 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2025-39933 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-39933 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04494 · Security Note
• https://linux.oracle.com/errata/ELSA-2026-0793.html · Vendor Advisory
• https://git.kernel.org/stable/c/581fb78e0388b78911b0c920e4073737090c8b5f · Patch
• https://errata.rockylinux.org/RLSA-2026:0760 · Vendor Advisory