In the Linux kernel, the following vulnerability has been resolved:
smb: client: let recvdone verify dataoffset, datalength and remainingdata_length
This is inspired by the related server fixes.