Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-93811

ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling 1. When ndr_decode_v4_ntacl() fails, the code jumped to free_n_data which only freed n.data, skipping kfree(acl.sd_buf) and leaking the buffer. Zero-initialize struct xattr_ntacl acl, reorder error labels to out_free to release acl.sd_buf on all error paths. 2. if (acl.sd_size < sizeof(struct smb_ntsd)) is true, original code returned success without freeing sd_buf and left stale *pntsd. Set rc = -EINVAL before jumping to out_free to return error code and free buffer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cb69d4d6f709f87c94afa28ae64c501576692171 to < f46a70a082bdbfecbe074af8a719c26c4deb58c6affected
  • 8f0541186e9ad1b62accc9519cc2b7a7240272a7 to < 86c2625fb9863139b359805fc6be1e31edbd3d65affected
  • 8f0541186e9ad1b62accc9519cc2b7a7240272a7 to < edc17db83085624a2b1bacf6a4521d7f15571737affected
  • 8f0541186e9ad1b62accc9519cc2b7a7240272a7 to < c3836f55e0dab96314774215e12d87f63fa919f2affected
  • 8f0541186e9ad1b62accc9519cc2b7a7240272a7 to < 6e6329322ad733c5b23555c609353841560b26bcaffected
  • 8f0541186e9ad1b62accc9519cc2b7a7240272a7 to < d708a36634bb7b6f94d0e76d587d2ec50b2b93b5affected
  • 6e8f4abf584253cbaa596ea4ad13110cf61cd4c9affected
  • 8e33102309bd6839b2e2e158f93a7b378cb4655daffected
  • 5.15.62 to < 5.15.222affected
  • 5.18.18 to < 5.19affected
  • 5.19.2 to < 5.20affected

Linux Linux

Default version status: affected

  • 6.0affected
  • 0 to < 6.0unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References