Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23282

smb: client: fix oops due to uninitialised var in smb2_unlink()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to uninitialised var in smb2_unlink() If SMB2_open_init() or SMB2_close_init() fails (e.g. reconnect), the iovs set @rqst will be left uninitialised, hence calling SMB2_open_free(), SMB2_close_free() or smb2_set_related() on them will oops. Fix this by initialising @close_iov and @open_iov before setting them in @rqst.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1cf9f2a6a544288516a7b9e883a48eba6246bcf2 to < 86163b98891aa9800f6103252e5acc7bb98afb91affected
  • 1cf9f2a6a544288516a7b9e883a48eba6246bcf2 to < dc710c87af3341554d02d634ada1d2036c49a94aaffected
  • 1cf9f2a6a544288516a7b9e883a48eba6246bcf2 to < 048efe129a297256d3c2088cf8d79515ff5ec864affected

Linux Linux

Default version status: affected

  • 6.17affected
  • 0 to < 6.17unaffected
  • 6.18.17 to ≤ 6.18.*unaffected
  • 6.19.7 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References