Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-89792

ksmbd: prevent out-of-bounds reads in share config responses

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the path length.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 88b7f1143b15b29cccb8392b4f38e75b7bb3e300 to < df8aa4a09733c4d3974b1db32c1782b3aad3a151affected
  • 51a6c2af9d20203ddeeaf73314ba8854b38d01bd to < 0127f1c119bde40578f4d25f5d17333b4e75de8caffected
  • a637fabac554270a851033f5ab402ecb90bc479c to < fd636a87161def6e35876ab7943641ce457974c8affected
  • a677ebd8ca2f2632ccdecbad7b87641274e15aac to < ffa507f5f774cb4d45136b106989ebc051361263affected
  • a677ebd8ca2f2632ccdecbad7b87641274e15aac to < cd2bcee450bc94770be56c0b896c1a1dc6838bd8affected
  • a677ebd8ca2f2632ccdecbad7b87641274e15aac to < 61a8d06600c8c397f9a7e01940479d4c94a82f5faffected
  • a677ebd8ca2f2632ccdecbad7b87641274e15aac to < f25e93768fcc5d8287e50b1ec52a42e4c276df34affected
  • 76af689a45aa44714b46d1a7de4ffdf851ded896affected
  • 5.15.157 to < 5.15.222affected
  • 6.1.85 to < 6.1.189affected
  • 6.6.26 to < 6.6.158affected
  • 6.8.5 to < 6.9affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References