https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T23:54:44.588849+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-40099 CVE-2025-40099 — cifs: parse_dfs_referrals: prevent oob on malformed input 2026-09-28T23:54:44.591500+00:00

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

cifs: parse_dfs_referrals: prevent oob on malformed input

Malicious SMB server can send invalid reply to FSCTL_DFS_GET_REFERRALS

- reply smaller than sizeof(struct get_dfs_referral_rsp) - reply with number of referrals smaller than NumberOfReferrals in the header

Processing of such replies will cause oob.

Return -EINVAL error on such replies to prevent oob-s.