Description

In the Linux kernel, the following vulnerability has been resolved: cifs: parse_dfs_referrals: prevent oob on malformed input Malicious SMB server can send invalid reply to FSCTL_DFS_GET_REFERRALS - reply smaller than sizeof(struct get_dfs_referral_rsp) - reply with number of referrals smaller than NumberOfReferrals in the header Processing of such replies will cause oob. Return -EINVAL error on such replies to prevent oob-s.

INFO

Published Date :

2025-10-30T09:48:05.859Z

Last Modified :

2026-01-02T15:33:01.046Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-40099 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-40099.

URL Resource
https://git.kernel.org/stable/c/15c73964da9df994302f579ed14ee5fdbce7a332 cve-icon cve-icon
https://git.kernel.org/stable/c/6447b0e355562a1ff748c4a2ffb89aae7e84d2c9 cve-icon cve-icon
https://git.kernel.org/stable/c/8bc4a8d39bac23d8b044fd3e2dbfd965f1d9b058 cve-icon cve-icon
https://git.kernel.org/stable/c/bb0f2e66e1ac043a5b238f5bcab4f26f3c317039 cve-icon cve-icon
https://git.kernel.org/stable/c/cfacc7441f760e4a73cc71b6ff1635261d534657 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025103017-CVE-2025-40099-fdf0@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-40099 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-40099 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact