CVE-2025-40099: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-40099 is a vulnerability discovered in the Linux kernel's CIFS (Common Internet File System) implementation, specifically in the parsedfsreferrals function. The vulnerability was disclosed on October 30, 2025, and affects various Linux distributions and their kernel versions (NVD, Debian).

The vulnerability exists in the parsing of DFS (Distributed File System) referrals where a malicious SMB server can send invalid replies to FSCTLDFSGETREFERRALS. The issue occurs when the reply is smaller than sizeof(struct getdfsreferralrsp) or when the number of referrals is smaller than NumberOfReferrals specified in the header. This malformed input can lead to an out-of-bounds (OOB) condition (NVD).

The vulnerability could allow a malicious SMB server to cause out-of-bounds memory access in the Linux kernel when processing DFS referrals. This could potentially lead to system instability or compromise (Debian).

The vulnerability has been fixed by implementing proper input validation in the parsedfsreferrals function. The fix returns an -EINVAL error when detecting malformed replies, preventing the out-of-bounds condition. Various Linux distributions have released or are in the process of releasing patched kernel versions (Debian).