In the Linux kernel, the following vulnerability has been resolved: smb: client: let recvdone verify dataoffset, datalength and remainingdata_length This is inspired by the related server fixes.
{ "urgency": "not yet assigned" }