Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-93801

smb/client: zero-initialize stack-allocated cifs_open_info_data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 436cfdbc57d98808fce427d9a8d97691374989b3 to < 2c5db82778f560121efda9e052e2f19c2d807c1baffected
  • fc2f2011d3d84b56f536b4a25a4bb2fa1b13d520 to < 74ff47e6c4213fcfeba2de448d9cbda200507d22affected
  • 057ac50638bcece64b3b436d3a61b70ed6c01a34 to < 22532dd88694ed20bdd47523ffa709f166ce776baffected
  • 057ac50638bcece64b3b436d3a61b70ed6c01a34 to < 8fce4cf4369c766a3293a05419500cbfde72e60daffected
  • 83d3bc866530a36a465b47cce4d2a9def2411960affected
  • 6.6.113 to < 6.6.160affected
  • 6.12.54 to < 6.12.111affected
  • 6.17.4 to < 6.18affected

Linux Linux

Default version status: affected

  • 6.18affected
  • 0 to < 6.18unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References