PT-2025-44278 · Linux+2 · Linux Kernel+2

Published

2025-10-29

·

Updated

2026-05-26

·

CVE-2025-40084

CVSS v2.0

5.5

Medium

VectorAV:A/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the ksmbd component. Specifically, the handle response() function does not adequately validate the payload size before attempting to read a handle, potentially leading to a read past the declared payload size when handling malformed or truncated messages from ksmbd.mountd. This issue involves dereferencing the payload as a 4-byte handle without prior size verification.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-69024
BDU:2026-02777
CVE-2025-40084
DLA-4379-1
DSA-6053-1
ECHO-ADA8-F598-466E
MGASA-2025-0309
MGASA-2025-0310
OESA-2025-2765
OESA-2025-2766
OESA-2025-2767
OPENSUSE-SU-2025:15702-1
OPENSUSE-SU-2026:10301-1
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8100-1
USN-8125-1
USN-8126-1
USN-8165-1
USN-8261-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu