Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-93785

cifs: validate idmap key payload length

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: validate idmap key payload length The cifs.idmap key type stores its payload length in key->datalen, which is limited to U16_MAX. Accepting a larger key payload truncates the recorded length and can make later users interpret the payload using inconsistent bounds. Reject oversized preparsed payloads before allocating or copying them. This keeps key->datalen consistent with the stored data for both inline and separately allocated idmap payloads.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to < eeac976b74b4f697cfc517187b7cbfd72652dbbcaffected
  • 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to < 125b05ac8ca8758950e4369c1542d57a162f504caffected
  • 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to < 945f6cde6bcf8f08f6fa5df8882b1b9582e55efaaffected
  • 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to < 3a4a34a732e8a08309eed0a74314dbd9f2f1c972affected
  • 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to < 6cfeef221ac00d63c07f6122f58e6159bde69ca0affected
  • 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to < 8b12f65d7caf16d124098cb4895a203367d35b57affected
  • 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to < 455488cd5054bcc59db40fa1cc2c004031a5b2a5affected

Linux Linux

Default version status: affected

  • 3.2affected
  • 0 to < 3.2unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References