The Linux kernel's SMB client had a vulnerability in the smb2_compound_op() function where the loop processing each command's response used incorrect indices to access the response buffers. This indexing error could result in out-of-bounds memory accesses when the index is greater than or equal to MAX_COMPOUND, leading to potential memory corruption. The issue was resolved by correcting the index references in the function. The vulnerability is tracked as CVE-2025-39975 and is rated critical with a CVSS 3.1 vector indicating network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Exploitation of this vulnerability could allow an attacker to cause out-of-bounds memory access in the Linux kernel SMB client, potentially leading to arbitrary code execution, system crashes, or data corruption. The vulnerability impacts confidentiality, integrity, and availability of affected systems.

A fix for this vulnerability has been implemented in the Linux kernel. Users and administrators should apply the official kernel updates that include the corrected smb2_compound_op() function to remediate this issue. Since no vendor advisory or patch links are provided, check the official Linux kernel repositories or vendor advisories for the relevant patch and update instructions. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.